AD User locked after failed login

hermanntoast · February 15, 2023, 3:36pm

Hello,

we are using Nextcloud with an LDAP plugin, which is connected to a Microsoft domain controller. With the right username and password all works fine, but if the password is wrong, the user account in active directory is instantly locked. In active directory the settings are set to four wrong logins to lock the user account. When I read the nextcloud.log I see, that the login is tried multiple times until I got an error message.

{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Admins,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base CN=Users,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=Mitarbeiter,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=ext_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"initializing paged search for filter (&(&(|(objectclass=person))(|(|(memberof=CN=Nextcloud,OU=Anwendungen,OU=Groups,OU=User,DC=<DOMAIN>,DC=intern)(primaryGroupID=6038))))(samaccountname=<USERNAME>)), base OU=allg_USER,OU=User,DC=<DOMAIN>,DC=intern, attr [\"entryuuid\",\"nsuniqueid\",\"objectguid\",\"guid\",\"ipauniqueid\",\"dn\",\"uid\",\"samaccountname\",\"memberof\",\"mail\",\"displayname\",\"jpegphoto\",\"thumbnailphoto\"], limit 500, offset 0","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Ready for a paged search","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Turned off SSL certificate validation successfully.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":0,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"LDAP error Invalid credentials (49) after calling ldap_bind","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}
{"reqId":"l8c3wd3ODoFkq3VnUrYE","level":2,"time":"2023-02-15T15:20:29+00:00","remoteAddr":"<IPADDRESS>","user":"--","app":"user_ldap","method":"POST","url":"/login","message":"Bind failed: 49: Invalid credentials","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0","version":"25.0.3.2","data":{"app":"user_ldap"}}

I replaced all sensitive data with a placeholder eg. IPADDRESS, USERNAME, DOMAIN (with brackets)

Nextcloud version (eg, 20.0.5): 25.0.3.2
Operating system and version (eg, Ubuntu 20.04): Nextcloud Docker on Ubuntu 22.04
Apache or nginx version (eg, Apache 2.4.25): NGINX Docker (latest)
PHP version (eg, 7.4): In Nextcloud Docker

Thank you for your help!

Kerasit · February 15, 2023, 5:41pm

Setting is defined under “Admin settings → Security → Password policies”. If the allowed login attempt is anything else than 1, then it is your LDAP settings in AD.

hermanntoast · February 17, 2023, 3:55pm

Thank you for your answer, but this does not solve the problem… I cat put any value in there, but it’s the same result:

One Login in Nextcloud → 5 tries against active directory → user locked on active directory

Are there more ideas?