Webdav login only possible with app password - how to enable login with user password?

Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version: 14.0.4 (dockerized)
Operating system and version: Ubuntu 18.04 TLS host, debian stretch within docker container
Apache version: 2.4.25
PHP version: 7.2.13

The issue you are facing:
I use LDAP authentication which works like a charm for the web and mobile (phone) clients. Now, I would like to use the webdav interface but this does not accept my LDAP credentials, it accepts only a generated app password. Is this the expected behavior? Is there an option to allow LDAP authentication for webav?
Two-factor authentication ist not used. In the past the option “token_auth_enforced” was set to “true”. Since I configured the option to “false” I can login with mobile clients without the need to generate an app password but webdav still requires it.

Is this the first time you’ve seen this error?: Yes

Steps to replicate it:

  1. Use webdav client and provide username + password. Login will be denied.
  2. Use webdav client and provide username + app password. Login is successful.

The output of your config.php file (generated by “occ config:list”):

    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
             "***REMOVED SENSITIVE VALUE***"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "overwrite.cli.url":  "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "14.0.4.2",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "logtimezone": "UTC",
        "installed": true,
        "loglevel": 2,
        "updatechecker": "true",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "memcache.local": "\\OC\\Memcache\\APCu",
        "ldapIgnoreNamingRules": false,
        "ldapProviderFactory": "OCA\\User_LDAP\\LDAPProviderFactory",
        "maintenance": false,
        "htaccess.RewriteBase": "\/",
        "default_language": "en",
        "default_locale": "de_DE",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "25",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "skeletondirectory": "\/var\/www\/additional\/nextcloud_skeleton",
        "trashbin_retention_obligation": "20, 40",
        "session_lifetime": "14400",
        "remember_login_cookie_lifetime": "86400",
        "token_auth_enforced": "false",
        "lost_password_link": "disabled",
        "overwritehost":  "***REMOVED SENSITIVE VALUE***",
        "overwriteprotocol": "https",
        "activity_expire_days": "180",
        "upgrade.disable-web": "true",
        "data-fingerprint": "c4a47f96c1112bb5c0e8a24d7ae4019e",
        "mail_smtpdebug": "false",
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***"
    }