# awx 15.0.1 error on AD login

**URL:** <https://forum.ansible.com/t/awx-15-0-1-error-on-ad-login/36497>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [March 30, 2022, 2:22pm UTC](https://forum.ansible.com/t/awx-15-0-1-error-on-ad-login/36497 "2022-03-30T14:22:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gianluca\_Cecchi](https://avatars.discourse-cdn.com/v4/letter/g/48db29/32.png) [@Gianluca\_Cecchi](https://forum.ansible.com/u/Gianluca_Cecchi)\
**Post date:** [March 30, 2022, 2:22pm UTC](https://forum.ansible.com/t/awx-15-0-1-error-on-ad-login/36497/1 "2022-03-30T14:22:18Z")

</div>

Hello,  
I have an old awx install, on containers, based on awx 9.0.1.0 and ansible 2.8.5, that I’m trying to port to Oracle Linux Automation platform, that is based, as I see, on awx 15.0.1 and ansible 2.9.27 on an rpm install, without containers.

In the old install I have my organization and team with users configured against AD.  
Using the same auth parameters in awx 15.0.1 I’m not able to login.  
With Settings → System → Logging  
logging aggregator level threshold to debug I get this in log file

2022-03-30 13:33:29,396 WARNING django\_auth\_ldap Caught LDAPError while authenticating my\_username: INVALID\_CREDENTIALS({‘msgtype’: 97, ‘msgid’: 1, ‘result’: 49, ‘desc’: ‘Invalid credentials’, ‘ctrls’: , ‘info’: ‘80090308: LdapErr: DSID-0C09044E, comment: AcceptSecurityContext error, data 52e, v2580’},)  
2022-03-30 13:33:29,509 WARNING awx.api.generics Login failed for user my\_username from x.y.w.z  
2022-03-30 13:33:29,516 WARNING django.request Unauthorized: /api/login/  
2022-03-30 13:33:29,516 WARNING django.request Unauthorized: /api/login/  
[pid: 1473|app: 0|req: 14/18] x.y.w.z () {60 vars in 1124 bytes} [Wed Mar 30 13:33:29 2022] POST /api/login/ =\> generated 6072 bytes in 175 msecs (HTTP/1.1 401) 8 headers in 392 bytes (1 switches on core 0)

The log lines are exactly the same if I digit a wrong password and if I digit a wrong username…

Do you have any suggestion to debug the problem?  
Eg with awx cli?

my parameters are:  
uri

ldap://my\_domain\_controller:389

bind dn

CN=bind\_user,CN=Users,DC=lab,DC=example,DC=com

ldap group type  
MemberDNGroupType

ldap user search  
[  
“DC=lab,DC=example,DC=com”,  
“SCOPE\_SUBTREE”,  
“(sAMAccountName=%(user)s)”  
]

ldap group search  
[  
“DC=lab,DC=example,DC=com”,  
“SCOPE\_SUBTREE”,  
“(objectClass=group)”  
]

ldap user attribute map  
{  
“first\_name”: “givenName”,  
“last\_name”: “sn”,  
“email”: “mail”  
}

ldap group type parameters  
{  
“name\_attr”: “cn”,  
“member\_attr”: “member”  
}

ldap user flags by group  
{  
“is\_superuser”: [  
“CN=example\_admins,CN=Users,DC=lab,DC=example,DC=com”  
]  
}

ldap organization map  
{  
“MYORG”: {  
“remove\_users”: false,  
“remove\_admins”: false,  
“users”: true,  
“admins”: “CN=example\_admins,CN=Users,DC=lab,DC=example,DC=com”  
}  
}

ldap team map  
{  
“MYTEAM”: {  
“users”: “CN=example\_admins,CN=Users,DC=lab,DC=example,DC=com”,  
“organization”: “MYORG”,  
“remove”: true  
}  
}

Thanks in advance,  
Gianluca