NextCloud users cannot join with Authentik LDAP idP (solved)

[Thunder_trLr]

Setting up Authentik LDAP provider to be used in NextCloud LDAP/AD integration, will not work out of the box.
This topic is for people trying to set this up and getting the same problem.

After setting the provider and nextcloud configuration, NextCloud LDAP/AD integration will report a working connection to the ldap server and Login Attributes → Verify Settings will be accepted for a Test Loginname, but NextCloud user login and Admin → users will not work.

Reported log error:
“LDAP Login: Could not get user object for DN cn=
,ou=users,dc=ldap,dc=goauthentik,dc=io. Maybe the LDAP entry has no set display name attribute?”

The problem was found and reported by ‘mapi007’ here:

LDAP mit HCL Domino Server, Error displayname not set

Hello, i have as LDAP Server an HCL Domino Server. I have make the configuration an here is all OK. But when i log in an user, i become the error the the the user has no displayname set. LDAP Login: Could not get user object for DN cn=test pws_test,o=test-frenz. Maybe the LDAP entry has no set display name attribute? With the softerra ldap browser i see the displayname with “test pws_test/test-frenz” can Nextcloud not work with an displayname withe the / sign?

Solution:
Administration settings → LDAP/AD integration → Expert → Override UUID detection → UUID Attribute for Users: uid

[wwe]

Hi @Thunder_trLr welcome to the forum

I appreciate your valuable first post!

Maxbe you have reasons to use Authentik LDAP provider but in general using OpenID connect which doesn’t require additional authentik providers sounds more practical.