Error after adding LDAP Authentication and logging into my account

CEbbinghaus

So I decided to finally invest the effort and set up an LDAP to manage all my friends user accounts and their access to my service. Funkwhale was my little experiment and after some fiddling with docker (for some reason I cannot use portainer) it worked on the first try (was able to log into an account that only existed in the LDAP).

However when I logged into my account (using LDAP credentials) i started encountering some problems. This account existed before i set up LDAP and has music uploaded to a library already. Logging in worked fine and I can see my favorites however my Profile picture has turned black [upl-image-preview url=https://forum.funkwhale.audio/assets/files/2022-12-30/1672359591-822565-image.png]

I also cannot access my profile page but after some investigation it seems that the problem is that the username I am currently logging in with "cebbinghaus" (from LDAP) is not in the same case as my previous username "CEbbinghaus" set up through funkwhale itself. Most of the functionality works (playback, browsing, favorites) but just the PFP and profile sections seem to require a case sensitive match.

Could it be that this is just a bug or missed consideration?

CEbbinghaus

So I correctly Hypothesized that it was a problem with the casing of the username. After changing it to CEbbinghaus in the LDAP and relogging back in I can now access my profile and settings although the Profile picture is still black which could well be due to this error:
[upl-image-preview url=https://forum.funkwhale.audio/assets/files/2022-12-30/1672361354-891740-image.png]

CEbbinghaus

Seems that this still hasn't received an answer & while I pointed out that it was "solved" because I could log in. This seems to have broken itself since then despite no changes to my account or LDAP / Funkwhale. I have tried the identical query in an external editor & it does in fact return the correct user

CEbbinghaus

And just as I finished off that last message & post it It occurs to me why it might have not worked. I had actually set up an alias of my account under a group to try and get admin permissions to work based on groups for a different app running off the same LDAP server. As such when Funkwhale tried searching for the user it actually got two results which caused it to report (wrongfully) that the credentials were invalid or the user didn't exist.

I think the way to solve this is to remove the search altogether & instead go straight to attempting to bind the user with the specified username to see if it works. If it fails the user doesn't exist & we can report that. But it should work every time someone tries to log in instead of being dependent of any amount of aliases or duplicate records at different levels.