[SOLVED] LDAP with bind_dn msg=no entries returned

[RogerSik]

Hello,

trying to use LDAPS with bind_dn. The error message from Proxmox server is

pvedaemon[11487]: authentication failure; rhost=10.101.66.25 user=r.sikorski@example.de msg=no entries returned

/etc/pve/domains.cfg

ldap: example.org
        base_dn dc=example,dc=org
        server1 ldap.example.org
        user_attr cn
        default 0
        port 636
        secure 1
        bind_dn
 uid=proxmox,ou=Internal,ou=Applications,ou=Users,dc=example,dc=org

/etc/pve/priv/ldap/example.org.pw

some-secure-password-with-succeed-when-manually-tried

Something which i overlooked?

Edit 01: Tried this credentials on another LDAP Application and it is working fine.

 

[RogerSik]

Yeaha it is now working! I changed the "Base Domain Name" directly to the OU where the users are located.

 

[raghu_mp]

@RogerSik - Can you please tell me how you configured the SSL certificate for LDAPS to work? I have added capath to domain.cfg and still getting TASK ERROR: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed.

ldapsearch with the same certificate located in /etc/ssl/certs works fine from all the nodes in the cluster.