LDAP Integration issue

[GFM-Network]

I'm trying to setup the LDAP on our meshcentral at work but everytime I change the ldap auth settings it starts with errors and stop working the web ui, can someone help me spot what I'm missing on my config.json file?

{
  "$schema": "https://raw.githubusercontent.com/Ylianst/MeshCentral/master/meshcentral-config-schema.json",
  "settings": {
    "MongoDb": "mongodb://127.0.0.1:27017/meshcentral",
    "cert": "hidden",
    "_WANonly": true,
    "_LANonly": true,
    "_sessionKey": "MyReallySecretPassword1",
    "_port": 443,
    "_aliasPort": 443,
    "_redirPort": 80,
    "_redirAliasPort": 80
  },
  "domains": {
    "": {
      "auth": "ldap",
      "ldapUserGroups": "memberOf",
      "ldapSyncWithUserGroups": {
      "filter": [ "hidden" ]
      },
      "ldapoptions": {
        "url": "ldap://10.58.254.71:389/",
        "bindDN": "hidden",
        "bindCredentials": "hidden",
        "searchBase": "hidden",
        "searchFilter": "(name={{username}})",
        "reconnect": true
      },
      "ldapUserBinaryKey": "objectSid",
      "ldapUserName": "sAMAccountName",
      "ldapUserEmail": "mail",
      "ldapUserPhoneNumber": "telephoneNumber",
      "ldapUserImage": "thumbnailPhoto",
      "ldapSaveUserToFile": "C:\\tmp\\ldapuser-save.txt"
  }
 },
  "_letsencrypt": {
    "_comment_": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
    "email": "[email protected]",
    "names": "myserver.mydomain.com",
    "skipChallengeVerification": true,
    "production": false
  }
}

I've made some changes now the webui open but I get this error:
https://imgur.com/LbqaFwp

[si458]

One thing to try is run meshcentral in debug mode and see what it does when it logs in and out
node node_modules/meshcentral --debug
Or
If docker add environment variable
ARGS: --debug

[si458]

I will have a play 2moz with my works AD see if I can figure out what the values need to be for u.
Are u logging in with the username or there email address?

[GFM-Network]

I tried login with the user logon that's what I use for other services:

[thermionic]

As you have used
"ldapUserName": "sAMAccountName",
Then you need to use the "User logon name (pre-Windows 2000)"

[GFM-Network]

but both: user logon name / user logon name (pre-windows 200):
have the same values, I shouldn't use "sAMAccountName" then?

[thermionic]

the other logon name would be the UPN which also requires the domain such as [email protected]

presuming that you are using LDAP on 389 and not LDAPS, I would run a packet capture on either the MC server or the AD DC and see if you see what is being sent "on the wire".