Using this config i was able to get everything working, but i found a few limitations:

1. Xen Orchestra cannot find any group members where the member has the "Primary Group" attribute set.
2. Only direct members of a group are recognized (nested groups don't work).
3. When signing in, i have to specify "username" instead of "username@cxlab.domain.com"
4. Groups are created by clicking "Synchronize LDAP groups", however users are not created until they sign into XOA the first time.
5. Users are not deleted from Xen Orchestra when they are removed from the domain. (but they can no longer log in to XOA)

auth-ldap (v0.10.6) - LDAP authentication plugin for XO-Server
Auto-load at server start [checked]

Configuration

URI: ldap://domaincontroller1.cxlab.domain.com

  **Certificate Authorities**
  Check certificate [disabled]
  Use StartTLS [disabled]
  Base: DC=cxlab,DC=domain,DC=com

  **Credentials**
  dn: cxadmin@cxlab.domain.com
  password: ******************

User filter: (sAMAccountName={{name}})
ID attribute: dn

  **Synchronize groups**
  [checked] Fill information (optional)
  Base: CN=Users,DC=cxlab,DC=domain,DC=com
  Filter: (ObjectClass=group)
  ID attribute: dn
  Display name attribute: cn

    **Members mapping**
    Group attribute: member
    User attribute: dn

I can extend the trial for 15 more days if you need.

Thanks

Thanks

yarn link 
00h00m00s 0/0: : ERROR: [Errno 2] No such file or directory: 'link'

Maybe I have the source all messed up and need to start from scratch, is there a good install guide to setup server and the use the deploy page?

So I followed guide documentation which pull from git.

Ok, so if you install it from the sources, don't install the plugins from NPM, use the source code from the repository instead. (we just marked them as deprecated on NPM since it could be confusing). All the plugins are in the packages folder. You can use Yarn's link feature to easily link xo-server-auth-ldap to xo-server.

All is better now, for me at least.

• node: 12.18.2
• npm: 4.6.1
• xen-orchestra-upload-ova: 0.1.3
• xo-server: 5.68.0
• xo-server-telemetry: 0.3.0
• xo-server-xoa: 0.10.0
• xo-web-free: 5.72.0
• xoa-cli: 0.21.1
• xoa-updater: 0.31.0

LDAP plugin still at 0.6.4
I install the plugin as follows -

npm install --global xo-server-auth-ldap

Output was

/usr/local/bin/xo-server-auth-ldap -> /usr/local/lib/node_modules/xo-server-auth-ldap/dist/test-cli.js
/usr/local/lib
└── xo-server-auth-ldap@0.6.4

LDAP test on webui still does not work.

In regards to the install from web I could not get it to connect to my VM even after following all the guides I could find to make sure the server was setup correctly. So I followed guide documentation which pull from git.

@willruss1, we made quite a lot of changes on the LDAP plugin, the latest version is 0.9.0. Could you update it and retry?

@gr85z 5.50.3 is the current "stable" version of XO. The latest changes of the LDAP plugin are still in the "latest" channel. You can change the channel on the right hand side of the updater page and then click on Upgrade. Then, the "current version" should say 5.51.1. You can then check your LDAP plugin configuration and retry.

Also, can you tell us about the issue you had with the deploy from https://xen-orchestra.com/#!/xoa? Did you get an error message?

Thanks!

LDAP logins are failing now where they were working before. Locally defined users within the app are unaffected. The test-cli.js seems to work as expected in regards to the actual LDAP interaction, but then fails when trying to authenticate as the returned user:

Hope this helps.

Ping @pdonias when he can take a look

To eliminate any environment issue, can you try with an XOA?