Issue with LDAP/Active Directory

[ArnaudL75]

Bug Description

Hello,

I have an issue when I try to connect my Server Pro to my Active Directory.

I provide the following informations:

• LDAP Host = ad1.mycompany.intra
• LDAP Port = 389
• Base DN = DC=mycompany,DC=INTRA
• Bind DN = CN=Admin_mycompany,CN=Users,DC=mycompany,DC=INTRA

I get the error message:
Failed to update Ldap: LDAP operation result: rc=49 (invalidCredentials), dn: "", text: "80090308: LdapErr: DSID-0C090434, comment: AcceptSecurityContext error, data 52e, v4f7c"

I am completely sure of the bind information.

When I try a tail -f /var/log/rustdesk-server/hbbs.log, I get :
[2023-09-13 18:46:33.591068 +02:00] INFO [src/ldap.rs:133] New LDAP connection: ldap://ad1.mycompany.intra:389

And I see the TCP connection on my FW.

Have you got an idea ?

Thanks a lot for your product !

How to Reproduce

Bottom

Expected Behavior

Expected : LDAP connection

Operating system(s) on local side and remote side

Debian 11

RustDesk Version(s) on local side and remote side

1.1.9

Screenshots

Additional Context

No response

[rustdesk]

how about change to

Base DN = CN=Users,DC=mycompany,DC=INTRA
Bind DN = CN=Admin_mycompany,CN=Users,DC=mycompany,DC=INTRA

or

Base DN = CN=Users,DC=mycompany,DC=INTRA
Bind DN = Admin_mycompany

[rustdesk]

@dinger1986

[ArnaudL75]

I just tried it now and unfortunately neither of them works.

Thanks for your support !

[dinger1986]

I'll test it out again, what version of AD are you using?

[dinger1986]

I cant get it to work, with TLS enabled I get an error on the AD server in event viewer without I get nothing just errors on The Web Console of RustDesk

To check DN etc I use dsquery user -name adminname also LDAP server setup as LDAP://fqdn I get the same errors as @ArnaudL75

Also in hbbs logs

Would it be helpful if I spin up a Windows DC for testing? I can do that tomorrow if needed, I have also disabled the firewall etc incase that was getting in the way

[rustdesk]

We will test it ourself on dev side.

[rustdesk]

@fufesou

[ArnaudL75]

I'll test it out again, what version of AD are you using?

Hi,

I'm using AD on Windows Server 2022 :)

[fufesou]

@ArnaudL75 Hi, can you please try the lower case DC and CN.

LDAP Host = ad1.mycompany.intra
LDAP Port = 389
Base DN = dc=mycompany,dc=INTRA
Bind DN = cn=Admin_mycompany,cn=Users,dc=mycompany,dc=INTRA

[ArnaudL75]

Yeeahhhhh it works !

Actually, it's work also with 👍

LDAP Host = ad1.mycompany.intra
LDAP Port = 389
Base DN = DC=MYCOMPANY,DC=INTRA
Bind DN = cn=Admin_mycompany,CN=Users,DC=MYCOMPANY,DC=INTRA

Just the first "CN" has to be lowercase :)

Thank you !

[rustdesk]

Base DN = CN=Users,DC=mycompany,DC=INTRA
Bind DN = Admin_mycompany

This does not work?

[dinger1986]

Does that work in testing? @fufesou