# Unable to authenticate against AD or FreeIPA from the Web GUI

**URL:** <https://forum.ansible.com/t/unable-to-authenticate-against-ad-or-freeipa-from-the-web-gui/31723>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [November 25, 2019, 7:02pm UTC](https://forum.ansible.com/t/unable-to-authenticate-against-ad-or-freeipa-from-the-web-gui/31723 "2019-11-25T19:02:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Calimero\_Solo](https://avatars.discourse-cdn.com/v4/letter/c/fbc32d/32.png) [@Calimero\_Solo](https://forum.ansible.com/u/Calimero_Solo)\
**Post date:** [November 25, 2019, 7:02pm UTC](https://forum.ansible.com/t/unable-to-authenticate-against-ad-or-freeipa-from-the-web-gui/31723/1 "2019-11-25T19:02:15Z")

</div>

Hello,

My AWX environment was installed with docker-compose, and all works fine except LDAP authentication.

I am able to query the AD server from the command line and get all the users:  
`ldapsearch -x -H ldap://192.168.1.125:389 -D "CN=Acme Brick,OU=Users-DEV,DC=DEV,DC=ACME,DC=LOCAL" -b "DC=DEV,DC=ACME,DC=LOCAL" -w <PASSWORD>`

But from the Web GUI Login page it fails systematically (same issue when using FreeIPA IdM).

My LDAP params are used in other systems with no issue, and I spent countless hours trying different parameters but no luck.

I am wondering if this has anything to do with the Docker container.

##### ENVIRONMENT- AWX version: 7.0.0.0

- AWX install method: docker
- Ansible version: 2.8.4
- Operating System: Linux Centos 7
- Web Browser: Firefox/Chrome/IE

##### STEPS TO REPRODUCE

I use either AD or FreeIPA IdM with the following settings for LDAP (example for AD):

LDAP SERVER URI: ldap://192.168.1.125:389  
LDAP BIND DN: CN=Acme Brick,OU=Users-DEV,DC=DEV,DC=ACME,DC=LOCAL  
LDAP BIND PASSWORD: \*\*\*\*\*\*\*\*\*\*\*\*  
LDAP USER DN TEMPLATE: sAMAccountName=%(user)s,ou=Users-DEV,DC=DEV,DC=ACME,DC=LOCAL  
LDAP GROUP TYPE: MemberDNGroupType  
LDAP REQUIRE GROUP:  
LDAP DENY GROUP:

LDAP USER SEARCH:  
[  
“OU=Users-DEV,DC=DEV,DC=ACME,DC=local”,  
“SCOPE\_SUBTREE”,  
“(sAMAccountName=%(user)s)”  
]

LDAP GROUP SEARCH:  
[  
“dc=DEV,dc=ACME,dc=local”,  
“SCOPE\_SUBTREE”,  
“(objectClass=user)”  
]

LDAP USER ATTRIBUTE MAP:  
{  
“first\_name”: “givenName”,  
“last\_name”: “sn”,  
“email”: “mail”  
}

LDAP GROUP TYPE PARAMETERS:  
{  
“name\_attr”: “cn”,  
“member\_attr”: “member”  
}

##### EXPECTED RESULTS

Successfully authenticate against Active Directory

##### ACTUAL RESULTS

Invalid username and/or password. Please try again.

 ![login.PNG](https://us1.discourse-cdn.com/ansible/original/2X/3/373d64901e4e41aacc1a1958fde2cd82479e3bae.png)