Skip to content

BREAKING fix(auth): authelia does not find any ldap group

Aurélien Bertron requested to merge dev/fix-auth-uniqueMember into master

In a previous dev, I updated basic LDAP configuration to enable the memberOf calculated field. It involved changing groups object class to groupOfUniqueNames instead of groupOfNames. The field member was also renamed into uniqueMember.

Here is a guide to migrate the existing groups, it is also in README file:


Due to an error in the ldap role, users created at container initialization do not get memberOf property set. LDAP is configured to set this property according to uniqueMember fields in groupOfUniqueNames objects.

At first, the groups were created with object class groupOfNames and member fields, hence the bug.

A simple solution to fix this is to recreate groups with correct object class in phpLDAPmanager:

  1. Export the group in LDIF format.
  2. Delete the group.
  3. Import the LDIF by changing objectClass to groupOfUniqueNames and member to uniqueMember.

Merge request reports