# LDAP connection trouble

**URL:** https://forums.suse.com/t/ldap-connection-trouble/634
**Category:** Rancher 1.x
**Created:** [October 5, 2015, 1:47pm UTC](https://forums.suse.com/t/ldap-connection-trouble/634 "2015-10-05T13:47:26Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![hannes\_brt](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/hannes_brt/32/334_2.png) [@hannes\_brt](https://forums.suse.com/u/hannes_brt)
#### Post date: [October 5, 2015, 1:47pm UTC](https://forums.suse.com/t/ldap-connection-trouble/634/1 "2015-10-05T13:47:26Z")

</div>

I have trouble authenticating Rancher using LDAP. I’m using a straightforward OpenLDAP server rather than Active Directory and the “Default Login Domain” seems to create problems with authentication. I typically authenticate a user with `cn=username,dc=mydomain,dc=com`. When I set “Default Login Domain” to `mydomain.com` the error message on my LDAP server is

```auto
openldap_1 | 5611ff17 conn=1243 fd=26 ACCEPT from IP=54.236.229.91:53391 (IP=172.17.0.1:389)
openldap_1 | 5611ff17 conn=1243 op=0 do_bind: invalid dn (mydomain.com\username)
openldap_1 | 5611ff17 conn=1243 op=0 RESULT tag=97 err=34 text=invalid DN
openldap_1 | 5611ff17 conn=1243 fd=26 closed (connection lost)

```

I see that Rancher is trying to authenticate using the Windows-like “DOMAIN\user” syntax, but I don’t know how to configure my OpenLDAP server to accept that.

---

<div class="post-metadata">

### Author: ![denise](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@denise](https://forums.suse.com/u/denise)
#### Post date: [October 5, 2015, 4:25pm UTC](https://forums.suse.com/t/ldap-connection-trouble/634/2 "2015-10-05T16:25:06Z")

</div>

There is an open issue to get OpenLDAP working.

> <https://github.com/rancher/rancher/issues/2090>
>
> Hi,
> Is there any plans to allow OpenLDAP based access control? The current implementation is quite specific to AD since it uses...