LDAP Outpost fails with "exceeded stage recursion depth"

alyxto commented 1 year ago

Describe the bug When I try to authenticate against the LDAP outpost, I get a "Invalid credentials (49)" response, even tho the credentials are valid. The outpost ist self shows the error "exceeded stage recursion depth".

To Reproduce ldapsearch -x -b "DC=auth,DC=example,DC=com" -H ldap://auth.example.com -D "cn=ldap,ou=users,DC=auth,DC=example,DC=com" -w 'REDACTED'

Expected behavior Not crashing

Logs authentik-ldap | {"bindDN":"cn=ldap,ou=users,dc=auth,dc=example,dc=com","client":"2a01:4f8:xxxx:xxxx::1","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"3027187c-XXXX-XXXX-XXXX-XXXX","timestamp":"2023-08-10T08:28:44Z"} authentik-ldap | {"bindDN":"cn=ldap,ou=users,dc=auth,dc=example,dc=com","client":"2a01:4f8:xxxx:xxxx::1","event":"Bind request","level":"info","requestId":"3027187c-XXXX-XXXX-XXXX-XXXX","timestamp":"2023-08-10T08:28:44Z","took-ms":13687}

Version and Deployment (please complete the following information):

authentik version: 2023.6.1
Deployment: docker-compose

theS1LV3R commented 1 year ago

Can reproduce. Had been working fine for a month or so until it just stopped working without me having made any changes (that I can remember at least).

Configuration is exact same as following https://goauthentik.io/docs/providers/ldap/generic_setup.

Using version 2023.8.2

Full debug log from moment ldap bind was attempted (spaced by equal blocks to make it easier to read):

Details

``` authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.300309"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.300730"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.314529"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.337696"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "stage": "", "timestamp": "2023-09-06T19:47:48.338919", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "f0a6a81526114f15bbae72896928fccb", "runtime": 89, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.362925", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.388574"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.388864"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.397262"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.418688"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage": "", "timestamp": "2023-09-06T19:47:48.419921", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.422762", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.423120"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.424384"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "6435b2adbf834b83ba5e051d970c6f53", "runtime": 58, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.432322", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.462358"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.462689"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.475264"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.496391"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "stage": "", "timestamp": "2023-09-06T19:47:48.497678", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "7e52d6540ab64bb0a000b50995567292", "runtime": 80, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.519737", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.550338"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.550664"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.562885"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.581751"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage": "", "timestamp": "2023-09-06T19:47:48.582947", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.585696", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.586053"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.587268"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "runtime": 67, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.595559", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.632309"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.632761"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.647073"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.670097"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "stage": "", "timestamp": "2023-09-06T19:47:48.671477", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "f3736b816cc048acab90f06dffd70327", "runtime": 88, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.694420", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.718720"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.718964"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.727599"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.741630"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "stage": "", "timestamp": "2023-09-06T19:47:48.742444", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "605a55f9fef24c4e909784680aebc920", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.744431", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.744704"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.745507"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "605a55f9fef24c4e909784680aebc920", "runtime": 48, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.750753", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.773758"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.773996"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.782610"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.796576"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "stage": "", "timestamp": "2023-09-06T19:47:48.797558", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "runtime": 57, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.813464", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.834575"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.834799"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.842738"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.856175"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage": "", "timestamp": "2023-09-06T19:47:48.857054", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.858970", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.859212"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.860055"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "2d7931b046254181b09a89b7a911ee0b", "runtime": 46, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.865173", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.886137"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.886389"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.894422"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.906780"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "stage": "", "timestamp": "2023-09-06T19:47:48.907637", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "4b66466da2e542fa8f5fb6015b013c43", "runtime": 50, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.922752", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.942773"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.943004"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.950926"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.962899"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage": "", "timestamp": "2023-09-06T19:47:48.963748", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.965775", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.966024"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.966855"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "runtime": 43, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.971962", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:48.993135"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:48.993381"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:49.002040"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:49.015735"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "stage": "", "timestamp": "2023-09-06T19:47:49.016710", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "ea2e8f98466a4610826995dbfd41a65b", "runtime": 54, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.031888", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.052070"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.052314"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.060186"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.071673"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage": "", "timestamp": "2023-09-06T19:47:49.072446", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.074193", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.074396"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.075073"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "2b7d8e69420349839141078d0d4c8e86", "runtime": 42, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.079642", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.101011"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.101207"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.109246"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.123558"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "stage": "", "timestamp": "2023-09-06T19:47:49.124663", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "runtime": 54, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.141191", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.167289"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.167595"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.176620"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.191152"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage": "", "timestamp": "2023-09-06T19:47:49.192058", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.194059", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.194306"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.195117"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "runtime": 51, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.200316", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.222808"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.223122"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.232259"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.247017"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "stage": "", "timestamp": "2023-09-06T19:47:49.247833", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "42018406d0a5436c95b396733b7a91f0", "runtime": 58, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.264456", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.286854"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.287145"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.296142"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.310052"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage": "", "timestamp": "2023-09-06T19:47:49.310879", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.313110", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.313354"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.314166"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "runtime": 49, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.319353", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.339343"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.339594"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.347494"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.360740"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "stage": "", "timestamp": "2023-09-06T19:47:49.361445", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "c982739f7635483c892e8b2e458c7419", "runtime": 50, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.375948", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.396070"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.396268"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.403900"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.418080"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage": "", "timestamp": "2023-09-06T19:47:49.418868", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.420688", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.420893"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.421564"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "runtime": 44, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.426086", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.446413"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.446621"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.453723"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.465631"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "stage": "", "timestamp": "2023-09-06T19:47:49.466355", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "ca00e687971d4e2085ec1863570cb6d7", "runtime": 49, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.479660", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.499755"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.499981"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.507682"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.521168"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage": "", "timestamp": "2023-09-06T19:47:49.521897", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "", "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.523578", "user": "ldapservice"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.523778"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.524486"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "984c56935d374b96bac9ed152b3bf72c", "runtime": 43, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.528985", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.555009"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.555251"} authentik_server | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.564145"} authentik_server | {"auth_via": "unauthenticated", "current_stage": "", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.578314"} authentik_server | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "stage": "", "timestamp": "2023-09-06T19:47:49.579158", "view_class": "authentik.stages.identification.stage.IdentificationStageView"} authentik_server | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "7209262c12f24ad19a4b5b51d092757e", "runtime": 55, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.595371", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"} authentik_ldap_outpost | {"bindDN":"cn=ldapservice,ou=users,dc=ldap,dc=authentik,dc=xxxxxx,dc=xxx","client":"fd00:beef:245::3","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"fff935fb-d647-41e5-9790-fb3162494aa7","timestamp":"2023-09-06T19:47:49Z"} authentik_ldap_outpost | {"bindDN":"cn=ldapservice,ou=users,dc=ldap,dc=authentik,dc=xxxxxx,dc=xxx","client":"fd00:beef:245::3","event":"Bind request","level":"info","requestId":"fff935fb-d647-41e5-9790-fb3162494aa7","timestamp":"2023-09-06T19:47:49Z","took-ms":1332} ```

authentik-automation[bot] commented 10 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

alyxto commented 10 months ago

Stale bots are the fucking worst!

authentik-automation[bot] commented 8 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

alyxto commented 8 months ago

I don't even know why I keep this issue open anymore. Migrated away from authentik a while ago because of that.

But still annoyed by the stale bot. Just because you didn't fix the issue doesn't mean it's not a issue anymore! FU Stale bot!

theS1LV3R commented 8 months ago

I completely nuked everything I had of my LDAP setup (removed users, groups, integration, etc) and re-configured it, and it somehow worked, so I have no idea what was wrong, considering it was the exact same configuration as before

authentik-automation[bot] commented 6 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

alyxto commented 6 months ago

This issue has been automatically marked as active because it has not received any developer attention yet.

TomKooiman commented 6 months ago

I would also like to bump this issue. Im running into the same problem with the default setup.

These are the trace logs the LDAP outpost gives:

{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got challenge","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:26Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:26Z","type":"native"}
{"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2024-03-21T22:43:27Z"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z"}

This is what the server logs:

{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "b66eaccd86b9449f91e04101268d42ee", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.194374", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "55063059403d4d74b321670304810e4e", "runtime": 101, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:58.338275", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "116ad2f33b674905bd24706390c4b4cf", "runtime": 125, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.508842", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "8d7a1d18119e4896852522762ecdc2df", "runtime": 118, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:58.669960", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "91ec6ba390684611af167bb982210465", "runtime": 134, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.853351", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "828e0c5bbb4442dc8d96a7bbca989259", "runtime": 106, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.005995", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "409553011d5a422e879f001d8f15551a", "runtime": 141, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.193902", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "b0340c930f714721853d1d2a3435922c", "runtime": 110, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.353949", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "380615e293aa4998becf3717d5dbf137", "runtime": 124, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.522827", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "3fb6f209eb004f4cac62101511172afb", "runtime": 98, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.664325", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "a9b8c755ae934a7f9338eddf9c5cb310", "runtime": 137, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.844247", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "b6324cfef3b24e52824f54e2c46d1836", "runtime": 115, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.004946", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "e4a45a50bd244c39b6a8eeb9142e8444", "runtime": 125, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.175906", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "feb7c823637b4cd5aa1de3d5cc08efb2", "runtime": 106, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.325987", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "13d0c4f3702144b68a210f35ac63f02e", "runtime": 132, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.505185", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "401ac0781e1f4a25b4c4a4df18e53c04", "runtime": 105, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.656841", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "b65dae188ad94a7c925de40ab040c6b4", "runtime": 130, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.829910", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "5366f4c709cd409eb2aa6d03a6648b4d", "runtime": 107, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.984233", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "8c05cfc00b8c45aba559500e4747e85c", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:01.162275", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "662984790853462fac2690effd9c778a", "runtime": 108, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:01.315316", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "1be976c8d0d64678a9e7c191a2be9ff4", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:01.497481", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}

@theS1LV3R Would you be willing to share parts of your LDAP setup? Maybe I could find some discrepancies in my own setup. I'm at my wits end with this issue.

If the devs would what any extra info. Feel free to ask.

theS1LV3R commented 5 months ago

Apologies for the slow response;

I have set up the LDAP outpost with the following docker-compose service:

  ldap_outpost:
    image: ghcr.io/goauthentik/ldap:$_AUTHENTIK_TAG
    container_name: authentik_ldap_outpost
    restart: unless-stopped
    ports:
      - 127.0.0.1:3389:3389
      - 127.0.0.1:6636:6636
    environment:
      AUTHENTIK_HOST: https://authentik.example.com
      AUTHENTIK_TOKEN: verylongkeygottenfromwebui

In the web-ui I created a new outpost:

Name: ldap-outpost
Type: LDAP
Integration: --------- (since I have configured it manually there is no reason for authentik to create it using the docker integration)
Applications:
- jellyfin_ldap

My jellyfin_ldap provider is configured with both direct binding and querying, and uses the ldap-authentication-flow flow. No MFA support. I have a dedicated ldap_bind_group as Search Group. Under Protocol settings, Base DN is set to the default (DC=ldap,DC=goauthentik,DC=io). Changing this used to work fine, haven't tried again since I re-setup everything.

My ldap-authentication-flow is collapsed below (UUIDs have been edited just to make them easier to read).

ldap-authentication-flow.yml

```yml context: {} entries: - attrs: authentication: none denied_action: message_continue designation: authentication layout: stacked name: ldap-authentication-flow policy_engine_mode: any title: ldap-authentication-flow conditions: [] id: null identifiers: pk: 00000000-0000-0000-0000-000000000001 slug: ldap-authentication-flow model: authentik_flows.flow state: present - attrs: geoip_binding: no_binding network_binding: no_binding remember_me_offset: seconds=0 session_duration: seconds=0 conditions: [] id: null identifiers: name: ldap-authentication-login pk: 00000000-0000-0000-0000-000000000002 model: authentik_stages_user_login.userloginstage state: present - attrs: case_insensitive_matching: true password_stage: 00000000-0000-0000-0000-000000000003 pretend_user_exists: true show_matched_user: true user_fields: - username - email conditions: [] id: null identifiers: name: ldap-identification-stage pk: 00000000-0000-0000-0000-000000000004 model: authentik_stages_identification.identificationstage state: present - attrs: evaluate_on_plan: true invalid_response_action: retry policy_engine_mode: any conditions: [] id: null identifiers: order: 10 pk: 00000000-0000-0000-0000-000000000005 stage: 00000000-0000-0000-0000-000000000004 target: 00000000-0000-0000-0000-000000000001 model: authentik_flows.flowstagebinding state: present - attrs: evaluate_on_plan: true invalid_response_action: retry policy_engine_mode: any conditions: [] id: null identifiers: order: 30 pk: 00000000-0000-0000-0000-000000000006 stage: 00000000-0000-0000-0000-000000000002 target: 00000000-0000-0000-0000-000000000001 model: authentik_flows.flowstagebinding state: present metadata: labels: blueprints.goauthentik.io/generated: 'true' name: authentik Export - 2024-04-01 17:16:44.172372+00:00 version: 1 ```

The bind user is:

Username: ldap_bind_user
User type: Service account
Email:

The user is added to the ldap_bind_group as described above, as well as password set using the Set password button.

In Jellyfin, the LDAP plugin is configured as following:

LDAP Server: authentik_ldap_outpost
LDAP Port: 6636
Secure LDAP: true
StartTLS: false
LDAP Bind User: cn=ldap_bind_user,ou=users,DC=ldap,DC=goauthentik,DC=io
LDAP Bind User Password:
LDAP Base DN for searches: DC=ldap,DC=goauthentik,DC=io

Using these settings login to Jellyfin works as supposed. Let me know if there are any missing details.

TomKooiman commented 5 months ago

Thanks for sharing @theS1LV3R. No worries im late too.

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside? I have been testing again a bit and when I connect from my local PC to my server over a FQDN then it works, but when I connect to with LDAP outpost and the server on the same machine and try to connect the two within a docker bridge network I get this error. So the server configuration is clearly fine.

Weirdly enough when I tried the exact same setup on my local machine in WSL it did work. The only difference between my machine and my server is that the server runs Debian 12 and my WSL is Ubuntu 22.04. I cant imagine that makes a difference but yet here we are.

gassssss commented 5 months ago

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside? I have been testing again a bit and when I connect from my local PC to my server over a FQDN then it works, but when I connect to with LDAP outpost and the server on the same machine and try to connect the two within a docker bridge network I get this error. So the server configuration is clearly fine.

Same behavior on my docker setup

theS1LV3R commented 4 months ago

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside?

The AUTHENTIK_HOST env var on the LDAP outpost is set to the external DNS name, so that connection goes outside of docker I believe.

Weirdly enough when I tried the exact same setup on my local machine in WSL it did work. The only difference between my machine and my server is that the server runs Debian 12 and my WSL is Ubuntu 22.04. I cant imagine that makes a difference but yet here we are.

WSLs network stack is very weird due to it being WSL, and that includes Docker unfortunately. So there could be a ton of other hidden differences.

authentik-automation[bot] commented 2 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

goauthentik / authentik

LDAP Outpost fails with "exceeded stage recursion depth" #6523