# Rancher Ldap auth provider issue

**URL:** <https://forums.suse.com/t/rancher-ldap-auth-provider-issue/43075>\
**Category:** SUSE Rancher Prime\
**Created:** [May 3, 2024, 11:00am UTC](https://forums.suse.com/t/rancher-ldap-auth-provider-issue/43075 "2024-05-03T11:00:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![thirum00rthy](https://avatars.discourse-cdn.com/v4/letter/t/cab0a1/32.png) [@thirum00rthy](https://forums.suse.com/u/thirum00rthy)\
**Post date:** [May 3, 2024, 11:00am UTC](https://forums.suse.com/t/rancher-ldap-auth-provider-issue/43075/1 "2024-05-03T11:00:35Z")

</div>

Hi team,  
LDAP entry details:

> `dn: uid=rancher-service-account,ou=rancher,dc=techavidity,dc=in`

Created rancher local principal name same as ldap uid(rancher-service-account) …Likewise password is same …

Not aware it’s needed or not but created sa also same name as ldap distinguished name and localprincipal name .  
[root@\*\*\*\*\*\*\* sa]# cat sa-full-role.yaml

```auto
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: fluentd-service-account
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: rancher-service-account
subjects:
- kind: ServiceAccount
  name: rancher-service-account
  namespace: rancher

---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: rancher-service-account
  namespace: rancher
rules:
  - apiGroups: ["*"]
    resources:
      - clusters
      - namespaces
    verbs:
      - get
      - watch
      - list

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: rancher-service-account
  namespace: rancher
secrets:
- name: rancher-sa-secret

```

In test and enable authentication place  
entered local principal details

> username: rancher-service-account  
> pasword: \*\*\*\*\*\*

If click enable getting authentication failed …Can anyone kindly point out my mistake and aid me to do ldap auth provider successfully …