# LDAP group filter wont work **URL:** \ **Category:** Product Support\ **Created:** [February 27, 2019, 4:56pm UTC](https://forum.opennebula.io/t/ldap-group-filter-wont-work/6948 "2019-02-27T16:56:43Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![5aint2ero](https://avatars.discourse-cdn.com/v4/letter/5/3be4f8/32.png) [@5aint2ero](https://forum.opennebula.io/u/5aint2ero)\ **Post date:** [February 27, 2019, 4:56pm UTC](https://forum.opennebula.io/t/ldap-group-filter-wont-work/6948/1 "2019-02-27T16:56:43Z")
I get the User login with LDAP working, but when i try to activate the group membership, login isn’t possible. **My ldap\_auth.conf:** user: \*\*\* password:\*\*\* host: myhost= port: 389 timeout: 40 base: ‘dc=sec,dc=t-labs,dc=tu-berlin,dc=de’ group: ‘cn=oneadmins,ou=groups,dc=sec,dc=t-labs,dc=tu-berlin,dcde’ user\_field: ‘uid’ group\_field: ‘member’ mapping\_generate: true mapping\_timeout: 300 mapping\_filename: server1.yaml mapping\_key: GROUP\_CN mapping\_default: 1 rfc2307bis: false **Ldap Structure:** 157 cn=oneadmins,ou=groups,dc=sec,dc=t-labs,dc=tu-berlin,dc=de 2503 cn: oneadmins 2504 objectClass: groupOfNames 2505 member: uid=username,cn=user name,ou=users,dc=sec,dc=t-labs,dc=tu-berlin,dc=de **oned.log:** Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: LOG I 39 Command execution failed (exit code: 255): /var/lib/one/remotes/auth/ldap/authenticate Wed Feb 27 17:52:19 2019 [Z0][AuM][I]: Command execution failed (exit code: 255): /var/lib/one/remotes/auth/ldap/authenticate Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: LOG I 39 Trying LDAP server server 1 Wed Feb 27 17:52:19 2019 [Z0][AuM][I]: Trying LDAP server server 1 Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: LOG I 39 (member=username) Wed Feb 27 17:52:19 2019 [Z0][AuM][I]: (member=username) Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: LOG I 39 User username is not in group cn=oneadmins,ou=groups,dc=sec,dc=t-labs,dc=tu-berlin,dc=de Wed Feb 27 17:52:19 2019 [Z0][AuM][I]: User username is not in group cn=oneadmins,ou=groups,dc=sec,dc=t-labs,dc=tu-berlin,dc=de Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: LOG I 39 Could not authenticate user username Wed Feb 27 17:52:19 2019 [Z0][AuM][I]: Could not authenticate user username Wed Feb 27 17:52:19 2019 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 39 - Wed Feb 27 17:52:19 2019 [Z0][AuM][E]: Auth Error: Wed Feb 27 17:52:19 2019 [Z0][ReM][D]: Req:880 UID:-1 one.user.info invoked , -1 Wed Feb 27 17:52:19 2019 [Z0][ReM][E]: Req:880 UID:- one.user.info result FAILURE [one.user.info] User couldn’t be authenticated, aborting call. As I said the login against LDAP with the group line commented in the ldap\_auth.conf is working, only when I try to allow login only to Users in a specific group. Maybe somebody sees my error? Greetings Henrik