Challenges in Accessing and Configuring LDAP in MeshCentral

[LeonardoIdalgo]

I've been struggling to configure LDAP in MeshCentral, despite successfully testing the same credentials using LDAP Soft and PowerShell. With PowerShell, I was able to establish a connection, verify that LDAP is active, and even perform queries, such as:

powershell

#Creating a directory object
$ldapConnection = New-Object System.DirectoryServices.DirectorySearcher
$ldapConnection.SearchRoot = [ADSI]"LDAP://$($ldapServer):$($ldapPort)"
$ldapConnection.Filter = "(cn=$groupName)" # Filter to search for the group

Defining the scope and properties to load

$ldapConnection.SearchScope = [System.DirectoryServices.SearchScope]::Subtree
$ldapConnection.PropertiesToLoad.Add("cn")
Using PowerShell, I was able to establish a connection to check if LDAP is active and successfully perform queries as well.

However, when I try to input the same LDAP information into MeshCentral, it fails to connect. This issue is becoming quite frustrating, especially since I can successfully query LDAP outside of MeshCentral but can't establish a connection within the platform itself.

`

"customer1": {
  "dns": "hidden",
  "title": "INxxxT",
  "title2": "Remote",
  "NewAccounts": 1,
  "auth": "ldap",
  "LDAPUserName": "gecos",
  "LDAPUserKey": "sAMAccountName",
  "LDAPUserEmail": "otherMail",
  "LDAPUserGroups": "memberOf",
  "LDAPSiteAdminGroups": [ "CN=TxxxxC,OU=IxxxxxxR,DC=mxxxxi,DC=xx,DC=gxx,DC=xx" ],
  "LDAPUserRequiredGroupMembership": [ "CN=xxxxxxC,OU=IxxxxxxER,DC=mxxxxqui,DC=xx,DC=xxx,DC=xx" ],
  "LDAPSyncWithUserGroups": { "filter": [ "CN=xxxxxxxIC" ] },
  "LDAPOptions": {
    "URL": "ldap://XXXXXXXXX:636",
    "BindDN": "CN=LEONARDO XXXXXX IDxLXO,OU=USUARIOS,OU=XXXXXXXXX TICA,OU=XXXXXX PXXXXXRA,OU=CXXXXX HXXXXXXX MXXXXXXXXX,DC=xxxxxxxi,DC=xxxx,DC=xxx,DC=xx",
    "BindCredentials": "HIdden*",
    "SearchBase": "DC=xxxxxxi,DC=xx,DC=xx,DC=xx",
    "SearchFilter": "(sAMAccountName={{username}})"
  }

`

C:\meshcentral\node_modules>node meshcentral --debug ldap,authlog MeshCentral HTTP redirection server running on port 80. AUTHLOG: Server listening on 0.0.0.0 port 80. MeshCentral v1.1.31, Hybrid (LAN + WAN) mode. MeshCentral Intel(R) AMT server running on xxxxxx. AUTHLOG: Server listening on 0.0.0.0 port xxxx. MeshCentral HTTPS server running on xxxxxxxxx:443. AUTHLOG: Failed password for leonardo.idxxlgo from xxxxxxx port 26280, Browser: Edge/129.0.0.0, OS: Windows/10 AUTHLOG: Failed password for MxxxxxxxI\leonardo.idxxlgo from 19x.xxx.xxx.xx port 2xx26, Browser: Edge/129.0.0.0, OS: Windows/10 AUTHLOG: Failed password for [email protected] from 19xxxxxxx port 2xx49, Browser: Edge/129.0.0.0, OS: Windows/10