Hello everyone. I’ve been trying to config LDAP on OP7.1.0, but no success - and the only threads I’ve found were from 2-3 years ago.
Testing LDAP connection works, but when any user try to log in, they get the “invalid username or password” error.

I’ve already checked everything from this thread https://community.openproject.com/topics/7944 to no avail. Any tips?

So… it seems something’s really not right.
When the “on-the-fly creation” option is checked, AD users can login without any trouble. Or is this by design and I misundertood something?

This is by design. By default, only existing, active users with their auth source set to your LDAP will be able to sign in.

With ‘on-the-fly creation’, users will be created from your attribute map upon their first login.

Best,
Oliver

thanks for the reply, Oliver! Then I guess I really misunderstood what the on-the-fly creation option meant. Must have been silly of me, but I actually thought it meant that creating an account on OP that wasn’t on AD would create that account on AD…

Hi João,

thanks for the reply. As you now know its actually the other way around. I’ll add an instruction text to the on-the-fly parameter to make it clearer what happens there.

Best,
Oliver

I feel like this is one of those moments where people will wonder “why the hell is this explanation here? Isn’t it obvious?”

But thanks, Oliver! =)