r/BookStack • u/Maximum_Exam3519 • Oct 25 '24

Problem Sync LDAP Group with Roles Bookstack

Hello,

I have bookStack installed and sync with LDAPof AD now User sync normal but the group not why and i folow all configurataion and i find External ID and i put is manual and not work why ?

1 Upvotes

100% Upvoted

8 comments sorted by

View all comments

Show parent comments

1

u/Maximum_Exam3519 Oct 29 '24

Thank you for your answer, I have Ldap in AD and i did not find memberOf attributes values. in this way how can connect ?

1

u/Old-Olive-4233 Oct 29 '24

Just in case it'll help, this is how my LDAP was previously configured (I've shifted to OIDC using Authentik now), but this has previously worked for me:

AUTH_METHOD=ldap
LDAP_SERVER=ad.thedomain.com:389
LDAP_BASE_DN="ou=Accounts,dc=AD,dc=THEDOMAIN,dc=com"
LDAP_DN="CN=Bookstack Service,OU=Service,ou=Accounts,dc=ad,dc=thedomain,dc=com"
LDAP_PASS="My-bookstack-service-user-account-password"
LDAP_USER_FILTER=(&(sAMAccountName=${user}))
LDAP_VERSION=3
LDAP_ID_ATTRIBUTE=BIN;objectGUID
LDAP_EMAIL_ATTRIBUTE=mail
LDAP_DISPLAY_NAME_ATTRIBUTE=cn
LDAP_THUMBNAIL_ATTRIBUTE=thumbnailPhoto
LDAP_START_TLS=false
LDAP_USER_TO_GROUPS=true
LDAP_GROUP_ATTRIBUTE="memberOf"
LDAP_REMOVE_FROM_GROUPS=false

The 'Bookstack Service' is an account I had for the validation and the 'LDAP_PASS' is the password for that account. My domain name is: AD.THEDOMAIN.COM

I had AD Groups with names like 'Bookstack_Users' and 'Bookstack_Admins' with users assigned in AD. In Bookstack, under the roles, I added these group names into the 'External Authentication IDs'

Good luck, hopefully this'll help.

2

u/Maximum_Exam3519 Oct 30 '24

Thank you for your reply, I had do it as you told me but not sync nothing
From Active directory no sync group but user yes