# Please help with AWX Configure OpenLDAP Authentication

**URL:** <https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [December 13, 2022, 1:06am UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460 "2022-12-13T01:06:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![russell.cecala](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russell.cecala/32/1028_2.png) [@russell.cecala](https://forum.ansible.com/u/russell.cecala)\
**Post date:** [December 13, 2022, 1:06am UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460/1 "2022-12-13T01:06:34Z")

</div>

I am trying to configure Ansible AWX to use my ldap server to authentication.

I can use `ldapsearch` to query my ldap server like so …

```auto
ldapsearch -H ldaps://ldap.example.com -D "cn=Manager,dc=example,dc=com" -W -b "dc=example.com"

```

And, of course, I had replaced `example.com` with my domain.

I also have an AWX (Opensource version of Ansible Tower). I am trying to configure my AWX to use my ldap server for authentication. So I logon to the AWC Web UI and go to settings and start fillout of the form for LDAP Auth:

```auto
LDAP Server URI: ldaps://ldap.example.com:636
LDAP Bind DN: cn=Manager,dc=example,dc=com
LDAP Bind Password: XXXXXXXXX
LDAP User DN Template: uid="%(user)s",dc=example,dc=com
LDAP Group Type: PosixUIDGroupType

```

I have no idea and I am just guessing at what I need to use for `LDAP User DN Template` or `LDAP Group Type`.

No matter what I have tried I cannot authenticate against my LDAP server ☹

---

<div class="post-metadata">

**Author:** ![russell.cecala](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russell.cecala/32/1028_2.png) [@russell.cecala](https://forum.ansible.com/u/russell.cecala)\
**Post date:** [December 13, 2022, 5:04pm UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460/2 "2022-12-13T17:04:54Z")

</div>

I wrote up this question on stackoverflow [https://stackoverflow.com/questions/74778614/how-to-configure-awx-to-authenticate-against-openldap](https://stackoverflow.com/questions/74778614/how-to-configure-awx-to-authenticate-against-openldap)  
Please take a look 🙂

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [December 16, 2022, 6:40pm UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460/3 "2022-12-16T18:40:17Z")

</div>

Hi! there is some ldap configuration docs here, [https://docs.ansible.com/automation-controller/latest/html/administration/ldap\_auth.html](https://docs.ansible.com/automation-controller/latest/html/administration/ldap_auth.html)

AWX Team

---

<div class="post-metadata">

**Author:** ![russell.cecala](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russell.cecala/32/1028_2.png) [@russell.cecala](https://forum.ansible.com/u/russell.cecala)\
**Post date:** [December 22, 2022, 3:04am UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460/4 "2022-12-22T03:04:50Z")

</div>

How do I figure out what I should use for ldap group type?

The doc says:

Click to select a group type from the **LDAP Group Type** drop-down menu list.

But does give any useful details about why one would choose one group type and not another.

---

<div class="post-metadata">

**Author:** ![russell.cecala](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russell.cecala/32/1028_2.png) [@russell.cecala](https://forum.ansible.com/u/russell.cecala)\
**Post date:** [December 22, 2022, 7:47pm UTC](https://forum.ansible.com/t/please-help-with-awx-configure-openldap-authentication/37460/5 "2022-12-22T19:47:34Z")

</div>

I was finally able to get LDAP Auth to work. The major problem I was having was that I was entering the WRONG PASSWORD!  
The hard part was getting confirmation that the password I was submitting was indeed wrong and here is what I did to confirm  
my configuration of LDAP Auth was correct in the “Settings \> LDAP Default” where correct.

First thing I should have done was log on to AWX UI as ‘admin’ then go to ‘Settings \> Logging’ and set “Logging Aggregator Level Threshold” to DEBUG.

Then one can check the log of the awx-demo-web container with these kubectl commands:

kubectl -n awx get pods  
kubectl -n awx logs -f awx-demo-fdakfjas-adfkjadsf -c awx-demo-web

…  
DEBUG … django\_auth\_ldap search\_s(…) returned 1 objects: …  
DEBUG … django\_auth\_ldap Auth for user me: user DN/password rejected by LDAP server.  
…