# LDAP issues with AWX

**URL:** <https://forum.ansible.com/t/ldap-issues-with-awx/33944>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [October 1, 2020, 2:16pm UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944 "2020-10-01T14:16:21Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aurelien1](https://avatars.discourse-cdn.com/v4/letter/a/e79b87/32.png) [@Aurelien1](https://forum.ansible.com/u/Aurelien1)\
**Post date:** [October 1, 2020, 2:16pm UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/1 "2020-10-01T14:16:21Z")

</div>

Hi,

I’m facing some issues using LDAP configuration in AWX.

**First of all, due to my company policy, I can’t update my containers right now and my AWX version is 2.1.2 which is VERY old… unfortunately right now I am not authorized to update it.**

This is my issue :  
LDAP is configured and worked fine at least one time : some users was able to connect to AWX through it.

But for some reason, it doesn’t work as it shouid now :

- People who was able to login during the time it worked are still able to do it.
- People who never tried to login to AWX can’t do it through LDAP.
- 6 groups are present in LDAP, rigorously identical, but 3 of them can login, 3 can’t. The only difference is that the last 3 ones were created after the 3 first.  
I tried to get more logs activating DEBUG level in Parameters \> System \> Logging but I can’t see any logs to help me. I checked in awx\_task\_1 and awx\_web\_1 containers, maybe these logs are elsewhere ?

Thank you for your help !

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [October 1, 2020, 2:47pm UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/2 "2020-10-01T14:47:03Z")

</div>

The output of people attempting to log in thru awx through ldap can be found by looking at docker logs awx\_web

---

<div class="post-metadata">

**Author:** ![Aurelien1](https://avatars.discourse-cdn.com/v4/letter/a/e79b87/32.png) [@Aurelien1](https://forum.ansible.com/u/Aurelien1)\
**Post date:** [October 2, 2020, 8:44am UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/3 "2020-10-02T08:44:53Z")

</div>

I can’t find nothing in awx\_web logs, I only have these :

[root@awxweb awx]# find / -name “\*.log”  
/anaconda-post.log  
/usr/lib/rpm/rpm.log  
/var/lib/awx/supervisord.log  
/var/log/yum.log  
/var/log/tower/dispatcher.log  
/var/log/nginx/access.log  
/var/log/nginx/error.log

And nothing in related to LDAP…

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [October 2, 2020, 8:59am UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/4 "2020-10-02T08:59:49Z")

</div>

No. You have to use docker logs on the awx\_web container

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [October 2, 2020, 9:00am UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/5 "2020-10-02T09:00:27Z")

</div>

Watch the output from it and you will see any messages coming out from it

---

<div class="post-metadata">

**Author:** ![Aurelien1](https://avatars.discourse-cdn.com/v4/letter/a/e79b87/32.png) [@Aurelien1](https://forum.ansible.com/u/Aurelien1)\
**Post date:** [October 2, 2020, 10:06am UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/6 "2020-10-02T10:06:40Z")

</div>

Oh my bad I didn’t get it ^^  
I found these lines when my coworker tried to log in :

2020-10-01 13:32:33,478 WARNING django\_auth\_ldap Caught LDAPError while authenticating USRTEST: NO\_SUCH\_OBJECT({‘info’: “0000208D: NameErr: DSID-03100241, problem 2001 (NO\_OBJECT), data 0, best match of:\n\t’OU=WMD\_ANSIBLE,OU=Applications,DC=groupe,DC=intra,DC=laposte,DC=fr’\n”, ‘matched’: ‘OU=WMD\_ANSIBLE,OU=Applications,DC=groupe,DC=intra,DC=laposte,DC=fr’, ‘desc’: ‘No such object’},)  
2020-10-01 13:32:33,551 DEBUG django\_auth\_ldap Authentication failed for USRTEST: user DN/password rejected by LDAP server.

Regards,

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [October 2, 2020, 3:47pm UTC](https://forum.ansible.com/t/ldap-issues-with-awx/33944/7 "2020-10-02T15:47:22Z")

</div>

user DN/password rejected by LDAP server.

There in lies the problem. You have an incorrect username or password
