Bookstack ldap long login times about bookstack HOT 10 CLOSED

@Jeffrey-FB Good to hear you found the cause! Will therefore close this off.

Now how do i add a 2nd ldap server in my .env for redundancy?

We don't specifically support/handle/test redundancy. PHP has some level of support built in (but I'm not sure on the full extent or handling of this) which I think you might be able to use via something like this:

LDAP_SERVER="ldaps://my.domain.com:636 ldaps://my.other.domain.com:636"

But again that's not something I've tested.

from bookstack.

Hi All

I really need to get this working, took me 3 mins last time to log.
I cannot find anything in the logs or it's not logging correctly.
How can i troubleshoot this?

Any help would be appreciated

from bookstack.

Changed a few setting which helped a little bit but still can take up to 2 mins to login for a returning user.
now using
LDAP_SERVER=ldaps://my.domain.com:636
And removed tls
#LDAP_START_TLS=false

What else could i try?

from bookstack.

If you repeatedly log in and out, does the login time continue to vary? If so, what does that pattern roughly look like?
Or is it just the first login that's slow?

from bookstack.

Hey @ssddanbrown

There doesn't seem to be a pattern.
In google if i log out and then back in, most times it's pretty quick.
If I've been using bookstack a while then sign out, it'll take a while to log back in.
If i close the browser down it's a long login every time.

Firefox seems to take long every time.
As does Microsoft edge.

This is all with the same user account.

Thoughts, more troubleshooting options?

from bookstack.

• What AWS service(s) are you using to host BookStack?
• How does BookStack reach your AD system in office (tunnels, vpn, proxies)?

If possible, you could test the connection directly on the host system using the ldapsearch command, just to check a non-bookstack method from the same host.

from bookstack.

Hey @ssddanbrown

• Bookstack is an EC2 instance
• It's connected via our VPC

We have other services in AWS that all communicate with our AD servers on perm.
i.e I can ping my AD server
I have configured realm with `realm discover' I can connect to my bookstack server with sshd using my AD credentials.

I've not really used ldapsearch before. I might need a little help with this one?
I've tried one of these examples
ldapsearch -H ldap://<server_name>:389 -D "<distinguished_name>" -w <password> -b "<search_base>" -s <scope> <filter>
This is what i get in return
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

I'll endeavor to get this working while i wait for a reply from you.
Will post my progress, let me know if there is anything else you want me to try?

from bookstack.

Okay so i followed this guide

So now I have ldap and ldaps working with ldapsearch
Both return instantly on the terminal.

FYI ping results icmp_seq=1 ttl=124 time=1.73 ms

No change to login times on Bookstack.
What do we try next?

from bookstack.

Okay i figured out what the problem was.
I was pointing to our domain for ldap my.domain.com
But we have multiple serving other regions
I've change it to hostname.my.domain.com and this has resolved the delay in login.

Now how do i add a 2nd ldap server in my .env for redundancy?

from bookstack.

That looks to be working, i can still login with adding that.
That's for all the help.

from bookstack.