ZITADEL•15mo ago

LDAP "user does not exist or too many entries returned" error -- bad filters?

Can I get some help potentially on an LDAP configuration I have? I believe the user filters or something is causing an issue. I'm mirroring something similar to what I've done in KeyCloak, but with different results.

Do you have thoughts here?

Name: ldap
Servers: ldap://ldap.com:389
BaseDn: DC=ldap,DC=com
BindDn: CN=admin,OU=Administrators,OU=UserObjects,DC=ldap,DC=com
UserFilters: cn
User Object Classes: person, organizationalPerson, user
Ldap attributes: uid

Thoughts??

FFO•10/11/24, 3:59 PM

Hm, not sure but user filters on CN could return multiple records.

CN is not unique as far as I know.

thinkertonOP•10/11/24, 7:34 PM

Yea, I 've tried sAMAccountName, upn, etc... same errors. It's driving me crazy

FFO•10/11/24, 8:23 PM

How about the DN

thinkertonOP•10/21/24, 4:13 PM

Any other ideas? Or is LDAP maybe not working with the version we have?

FFO•10/21/24, 4:15 PM

I am not aware that LDAP should not work

@stebenz maybe can help here

thinkertonOP•10/21/24, 4:15 PM

Appreciate the suggested tips for sure, any thoughts from you @stebenz ?

FFO•10/21/24, 4:16 PM

I think it must be a filter issue, since it looks like we get multiple results

thinkertonOP•10/21/24, 4:17 PM

Yea, I'm keying in on the filter issue I believe here... but can't seem to find good examples.

thinkertonOP•10/21/24, 4:17 PM

I have a keycloak instance that's working well with similar filters

stebenz•10/21/24, 4:26 PM

What is the original error? Do you get an error while trying to login?

Mansoor•11/20/25, 1:18 PM

I am facing the same issue. The LDAP worked fine with KeyCloak but gives "user does not exist or too many entries returned" error in zitadel. Were you able to resolve the issue @thinkerton ?

thinkertonOP•11/20/25, 3:08 PM

Never got it resolved

thinkertonOP•11/20/25, 3:09 PM

I used KeyCloak as the front end IdP and added Zitadel as a client in KeyCloak, used KeyCloak to connect with AD. I’m leveraging Zitadel for the PATs.

thinkertonOP•11/20/25, 3:10 PM

Its extra for sure but it works