Can't login to nextcloud with ldap backend

[tribut]

Actual behaviour

NC app replaces login username with ldap id.

Expected behaviour

App should use the username as I entered it.

Steps to reproduce

1. (I have accounts on two OC instances, one with a regular database backend and one which authenticates against Active Directory.)
2. Add AD account as second account to NC app. Login works. Files are displayed.
3. Switch to normal account.
4. In the side drawer the name of the other account changes to the ldap id (screenshot 1).
5. Switching back does lead to a password prompt, the incorrect username cannot be changed (screenshot 2). Login is no longer possible.

Environment data

Android version: 6.0.1

Device model: Moto X Play

Stock or customized system: Stock

Nextcloud app version: 2.0.0RC4

Nextcloud server version: Database backend: 12.0.2 , AD backend: 10.0.6

[AndyScherzinger]

@tobiasKaminsky is this the issue you fixed?

[tobiasKaminsky]

We will include a ldap fix for RC5, but I am unsure if this fixes the described problem.
Once it is release, I'll ping you.

[AndyScherzinger]

@tribut Does 2.0.0 RC5 fix this issue for you?

[tribut]

No, unfortunately not. The behavior is unchanged (I did remove and re-add the ldap account to check).

[tobiasKaminsky]

Can you create us a test account for the ldap backend and send the credentials with a link to this issue to android at nextcloud dot com?

[tribut]

Unfortunately I do not have the authority to do that. I could mitm the communication of the app with the NC instance if that's helpful?

[tobiasKaminsky]

Then it is very hard to debug it.

Nextcloud server version: Database backend: 12.0.2 , AD backend: 10.0.6

Does this mean that it is working on NC12 (without LDAP) and on NC10 (with LDAP) not?
NC10 is end of life and maybe this ldap bug was fixed in one of the newer version, so please upgrade before we spent more time in debugging this.

[tribut]

Does this mean that it is working on NC12 (without LDAP) and on NC10 (with LDAP) not?

Yes. I have since updated the LDAP-based NC instance to 12.0.2 and the problem remains.

I'll see if I can find something interesting from the http traffic. Otherwise I'll setup another ldap server with only my users' data in it to maybe reproduce it. Creating a test account there would be no problem.

[tribut]

Just FYI: I just got feedback that the iOS Nextcloud app has the same behavior: It logs in very briefly and then disconnects. The server shows multiple login attempts with the ldap ID as username.

This also explains why some users were complaining about slow login times, because brute force detection is also kicking in.

[mario]

@tribut yes. Explanations have been made by all relevant parties so this will be improved.

cc @tobiasKaminsky

[tribut]

Great! 👍
So further information from me is no longer needed to reproduce this?