User with special characters in their password cannot login to NextCloud (Authentik LDAP Prov)

ℹ️ Support
, , ,
1

Nextcloud version (eg, 29.0.5): 29.0.2
Operating system and version (eg, Ubuntu 29.04): NextCloud AIO
Apache or nginx version (eg, Apache 2.4.25): NextCloud AIO (Apache IIRC)
PHP version (eg, 8.3): NextCloud AIO ( 29.0.2 )

The issue you are facing:
Users with special characters in their passwords cannot log into NextCloud using LDAP AD app against a Authentik LDAP Outpost.

Is this the first time you’ve seen this error? (Y/N): Y

Steps to replicate it:

  1. Create user
  2. Set password to test
  3. Works
  4. Set password to 45£1%1i
  5. Fails even though other services can use the new password fine.

The output of your Nextcloud log in Admin > Logging:

Bind failed: 49: Invalid credentials

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

NA

The output of your Apache/nginx/system log in /var/log/____:

NA

Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

None relevant
2

Are you changing the password in Nextcloud or your LDAP server?

Also, any chance the account you’re changing the password for is also the one for your User DN on the Server tab? (I.e. your service account).

3

It doesn’t address you original question directly but could you explain a reason to use LDAP with Authentik? It offers modern OpenID Connect interface which is superior to LDAP and should be preferred in general.

4

Changing on LDAP.
No.

5

I want the native NextCloud login - not an authorization flow.