LDAP Authentication Problem

[Dorus-braems]

Hi I am running a self hosted Netbox but I am having some troubles getting LDAP to work.
Netbox version: 3.7.4

This is my LDAP configuration:

import ldap
from django_auth_ldap.config import LDAPSearch, LDAPSearchUnion, NestedGroupOfNamesType , GroupOfNamesType
AUTH_LDAP_SERVER_URI = "ldap://{ip of my ldap server}"
AUTH_LDAP_CONNECTION_OPTIONS = {
    ldap.OPT_REFERRALS: 0
}
AUTH_LDAP_BIND_DN = "CN=ADBind,OU=SystemAccounts,OU=Operations,DC=EXAMPLE,DC=COM"
AUTH_LDAP_BIND_PASSWORD = "example"
LDAP_IGNORE_CERT_ERRORS = True
AUTH_LDAP_USER_SEARCH = LDAPSearch("DC=EXAMPLE,DC=COM", ldap.SCOPE_SUBTREE, "(sAMAccountName=%(user)s)")
AUTH_LDAP_USER_DN_TEMPLATE = None
AUTH_LDAP_USER_ATTR_MAP = {
    "username": "sAMAccountName",
    "email": "mail",
    "first_name": "givenName",
    "last_name": "sn",
}
AUTH_LDAP_USER_QUERY_FIELD = "username"
AUTH_LDAP_GROUP_SEARCH = LDAPSearch("DC=EXAMPLE,DC=COM", ldap.SCOPE_SUBTREE, "(objectClass=group)")
#AUTH_LDAP_GROUP_TYPE = NestedGroupOfNamesType()
AUTH_LDAP_GROUP_TYPE = GroupOfNamesType()
AUTH_LDAP_REQUIRE_GROUP = "CN=grp_gnt_netbox_users,OU=Groups,OU=2. Client Side Assets,OU=excentis.com,DC=EXAMPLE,DC=COM"
AUTH_LDAP_MIRROR_GROUPS = True
AUTH_LDAP_USER_FLAGS_BY_GROUP = {
    "is_active": "CN=grp_gnt_netbox_users,OU=Groups,OU=2. Client Side Assets,OU=excentis.com,DC=EXAMPLE,DC=COM",
    "is_staff": "CN=grp_gnt_netbox_staff,OU=Groups,OU=2. Client Side Assets,OU=excentis.com,DC=EXAMPLE,DC=COM",
    "is_superuser": "CN=grp_gnt_netbox_admin,OU=Groups,OU=2. Client Side Assets,OU=excentis.com,DC=EXAMPLE,DC=COM"
}
AUTH_LDAP_FIND_GROUP_PERMS = True
AUTH_LDAP_CACHE_TIMEOUT = 3600
AUTH_LDAP_ALWAYS_UPDATE_USER = True

I have added this line to /opt/netbox/netbox/netbox/configuration.py for debugging:

LOGGING = {
    'version': 1,
    'disable_existing_loggers': False,
    'handlers': {
        'netbox_auth_log': {
            'level': 'DEBUG',
            'class': 'logging.handlers.RotatingFileHandler',
            'filename': '/opt/netbox/local/logs/django-ldap-debug.log',
            'maxBytes': 1024 * 500,
            'backupCount': 5,
        },
    },
    'loggers': {
        'django_auth_ldap': {
            'handlers': ['netbox_auth_log'],
            'level': 'DEBUG',
        },
    },
}

But everytime I try to login with my AD credentials I get:

Authentication failed for [email protected]: failed to map the username to a DN.

I tried a manual search on the server with ldapsearch and it returns the correct users and groups.
Any idears what the problem could be ?

[markkuleinio]

(use three backticks before and after the code blocks: https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/creating-and-highlighting-code-blocks)

[Dorus-braems]

turns out with this configuration you are only able to login with example.e and not [email protected]

[markkuleinio]

Try replacing sAMAccountName with userPrincipalName here:

AUTH_LDAP_USER_SEARCH = LDAPSearch("DC=EXAMPLE,DC=COM", ldap.SCOPE_SUBTREE, "(sAMAccountName=%(user)s)")

[jCaffie]

turns out with this configuration you are only able to login with example.e and not [email protected]

What is example.e?

From your config, it looks like you should just be able to login as username and that's it, no?