In my application flow, I want to authenticate a user in an on-premise LDAP. I have tried several contrib-nodes and passport and can't get it to work. I have been able to successfully authenticate using node-red-contrib-nr-ldapauth and node-red-node-ldap, but both require a bind user, which is not…

If all you need to do is prove that the given username and password are correct, then you don't always need a binding username and pwd in order to do a search. If you are not interested in the user's groups or name or other LDAP properties, you can just bind to the LDAP server using the user/pwd of…

It really makes me frustrated when other people make it look so easy. I'm not sure what I was doing wrong, or maybe I don't care anymore. I tried your code and it works beautifully and it's so simple. Thanks much!

Thanks, but with the solution provided by @stew , I don't need to use Express at all.

Glad it helped, I might make a node for it if I ever get bored :slight_smile: FYI, the LDAP stuff was easy when you know, but it took me the best part of an hour to figure out that I had to use node.send(msg) within the callback function instead of return msg at the end of the function. New to Jav…

I wrestled with that too. As I understand it, it's because the function is being called to handle the result of the client.bind or client.search, and not run inline with the sequential js. This is the only instance in my code so far that needed node.send.

Follow up question? Using openSSL -showcerts in the Node Red docker container, I connect to a DNS name, let's say ldap.com:389 , and I can bind (note no ldap://). This also works if I connect to ldap.com:636 . In my Node Red code, using ldapjs, I use ldap://ldap.com:389 and it works fine. However, …

Hi. That is strange. Just tried from Windows 10 to an AD DC with LDAPS on port 636 and it works without changing any of the code, just using LDAPS://dc.local:636 in the URL. However, this is a domain-joined machine with all the trusted cert chains installed locally. Does it work for you with LDA…

[image] stew: Do you know if this async-ness is a Node.js behaviour or Javascript? Asymc is an important part of JavaScript and Node.js is "just" server-side JavaScript. JavaScript basically operates on an implicit loop which enables async-like behaviour on a single thread. Wherever you see s…

Stu, can you provide a link to the node-red-contrib-ldap node you're referring to? I can't find this exact one, but lots of similarly named ones.

It is the node-red-node-ldap node that you said you had got working in the first post - it is called node-red-contrib-ldap on Github. https://flows.nodered.org/node/node-red-node-ldap

Node-RED

Node-RED Forum

Authenticate against LDAP in Node Red

General

TotallyInformation 14 June 2019 21:29 4

Node-RED uses Express internally so it is certainly possible to use it. How you use it depends on what you are trying to authenticate.

Topic		Replies	Views
LDAP Basics to start with General	21	1070	5 November 2021
Dashboard authentification with LDAP(s) Dashboard	3	715	13 November 2020
Nodered - hub & spoke - security General security	11	369	28 February 2024
LDAP Authentication General	4	184	3 January 2025
Node to authenticate with AD? General	3	1608	14 June 2019

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Authenticate against LDAP in Node Red

Related topics