# LDAP issues for 2.1.0 **URL:** \ **Category:** AWX Project\ **Created:** [November 20, 2018, 3:44pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078 "2018-11-20T15:44:57Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Strung6013](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Strung6013](https://forum.ansible.com/u/Strung6013)\ **Post date:** [November 20, 2018, 3:44pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/1 "2018-11-20T15:44:57Z")
I’ve got my LDAP auth setup with the following information and I am pretty sure that it is working somewhat as I think it is finding my username properly, but it isn’t allowing me to login. Can someone please look over my settings and tell me what I’ve done wrong? Also, one other thing I had saw done by others that might fix this was deleting cached credentials, but I can’t find the command to do that. Can someone tell me where to find the command short of nuking the docker container and refilling the information in again? LDAP SERVER URI `ldap://servername.domain.local:389` LDAP BIND DN `CN=Ansible,OU=Service_Accounts,DC=domain,DC=local` LDAP USER SEARCH `["ou=LEVEL2,ou=LEVEL1,dc=domain,dc=local", "SCOPE_SUBTREE", "(sAMAccountName=%(user)s)"]` LDAP GROUP SEARCH ` [ “dc=domain,dc=local”, “SCOPE\_SUBTREE”, “(objectClass=group)” ] ` LDAP USER ATTRIBUTE MAP `{ "first_name": "givenName", "last_name": "sn", "email": "mail" }` LDAP USER FLAGS BY GROUP `{ "is_superuser": ["cn=Domain Admins,ou=Users,dc=domain,dc=local"] }` ---
**Author:** ![Strung6013](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Strung6013](https://forum.ansible.com/u/Strung6013)\ **Post date:** [November 20, 2018, 4:13pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/2 "2018-11-20T16:13:12Z")
So when I am searching through the awx\_web logs I see the warning message “2018-11-20 16:05:22,851 WARNING django\_auth\_ldap Caught LDAPError while authenticating my\_username: NO\_SUCH\_OBJECT({‘info’: “0000208D: NameErr: DSID-0310020A, problem 2001 (NO\_OBJECT), data 0, best match of:\n\t’DC=domain,DC=local’\n”, ‘matched’: ‘DC=domain,DC=local’, ‘desc’: ‘No such object’},)” I’m not sure why it isn’t able to match successfully. Any thoughts on what I’m missing here? ---
**Author:** ![Sashank](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@Sashank](https://forum.ansible.com/u/Sashank)\ **Post date:** [November 20, 2018, 4:16pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/3 "2018-11-20T16:16:16Z")
We had the same issue which we managed changing the samaccountname to uid and object class to group of unique names and a bad password for bind dn replaced to good ones .(as per the BIND DN created in ED/AD) once i made above changed everything was good. ---
**Author:** ![Sashank](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@Sashank](https://forum.ansible.com/u/Sashank)\ **Post date:** [November 20, 2018, 4:18pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/4 "2018-11-20T16:18:37Z")
as well the bind dn cn replaced with uid ---
**Author:** ![Strung6013](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Strung6013](https://forum.ansible.com/u/Strung6013)\ **Post date:** [November 20, 2018, 4:33pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/5 "2018-11-20T16:33:18Z")
So I made the following changes to my settings and it still isn’t woirking ![Screen Shot 2018-11-20 at 10.26.18 AM.png](https://us1.discourse-cdn.com/ansible/original/2X/d/d873ff65f88a19b3a316678731ac26de8baeadbf.png) ---
**Author:** ![Strung6013](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Strung6013](https://forum.ansible.com/u/Strung6013)\ **Post date:** [November 26, 2018, 1:17pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/6 "2018-11-26T13:17:16Z")
Just a bump to see if anyone has any more ideas. I’m at a loss as to what is causing this. As a clarification it was working with a previous version of AWX and my domain servers. So I know it can work, but am just not sure where the disconnect is. ---
**Author:** ![Sam2](https://avatars.discourse-cdn.com/v4/letter/s/9de0a6/32.png) [@Sam2](https://forum.ansible.com/u/Sam2)\ **Post date:** [November 26, 2018, 1:53pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/7 "2018-11-26T13:53:26Z")
Hello, I have another issue but not sure if it is related, in my case AWX has the group type drop down list empty, is it the same in your case ? ![image.png](https://us1.discourse-cdn.com/ansible/original/2X/6/6b8025af60ae2285b978f00fd916ec3f010821ae.png) Thanks Samer ---
**Author:** ![Strung6013](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Strung6013](https://forum.ansible.com/u/Strung6013)\ **Post date:** [November 26, 2018, 2:03pm UTC](https://forum.ansible.com/t/ldap-issues-for-2-1-0/29078/8 "2018-11-26T14:03:50Z")
Mine is also blank, but I ran across this to fill in the proper settings… [https://github.com/ansible/awx/issues/2586](https://github.com/ansible/awx/issues/2586) This might fix your issue.