authentik LDAP Outpost fails with "exceeded stage recursion depth"

Describe the bug When I try to authenticate against the LDAP outpost, I get a "Invalid credentials (49)" response, even tho the credentials are valid. The outpost ist self shows the error "exceeded stage recursion depth".

To Reproduce ldapsearch -x -b "DC=auth,DC=example,DC=com" -H ldap://auth.example.com -D "cn=ldap,ou=users,DC=auth,DC=example,DC=com" -w 'REDACTED'

Expected behavior Not crashing

Logs authentik-ldap | {"bindDN":"cn=ldap,ou=users,dc=auth,dc=example,dc=com","client":"2a01:4f8:xxxx:xxxx::1","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"3027187c-XXXX-XXXX-XXXX-XXXX","timestamp":"2023-08-10T08:28:44Z"} authentik-ldap | {"bindDN":"cn=ldap,ou=users,dc=auth,dc=example,dc=com","client":"2a01:4f8:xxxx:xxxx::1","event":"Bind request","level":"info","requestId":"3027187c-XXXX-XXXX-XXXX-XXXX","timestamp":"2023-08-10T08:28:44Z","took-ms":13687}

Version and Deployment (please complete the following information):

authentik version: 2023.6.1
Deployment: docker-compose

Aug 10 '23 08:08 alyxto

Can reproduce. Had been working fine for a month or so until it just stopped working without me having made any changes (that I can remember at least).

Configuration is exact same as following https://goauthentik.io/docs/providers/ldap/generic_setup.

Using version 2023.8.2

Full debug log from moment ldap bind was attempted (spaced by equal blocks to make it easier to read):

Details

authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.300309"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.300730"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.314529"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "timestamp": "2023-09-06T19:47:48.337696"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f0a6a81526114f15bbae72896928fccb", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.338919", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "f0a6a81526114f15bbae72896928fccb", "runtime": 89, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.362925", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}

authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.388574"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.388864"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.397262"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.418688"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.419921", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.422762", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.423120"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "6435b2adbf834b83ba5e051d970c6f53", "timestamp": "2023-09-06T19:47:48.424384"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "6435b2adbf834b83ba5e051d970c6f53", "runtime": 58, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.432322", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.462358"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.462689"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.475264"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "timestamp": "2023-09-06T19:47:48.496391"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7e52d6540ab64bb0a000b50995567292", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.497678", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "7e52d6540ab64bb0a000b50995567292", "runtime": 80, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.519737", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.550338"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.550664"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.562885"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.581751"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.582947", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.585696", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.586053"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "timestamp": "2023-09-06T19:47:48.587268"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "d4a2f844e2e2436e86710fccf42b9a9c", "runtime": 67, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.595559", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.632309"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.632761"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.647073"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "timestamp": "2023-09-06T19:47:48.670097"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "f3736b816cc048acab90f06dffd70327", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.671477", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "f3736b816cc048acab90f06dffd70327", "runtime": 88, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.694420", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.718720"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.718964"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.727599"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.741630"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.742444", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "605a55f9fef24c4e909784680aebc920", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.744431", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "605a55f9fef24c4e909784680aebc920", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.744704"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "605a55f9fef24c4e909784680aebc920", "timestamp": "2023-09-06T19:47:48.745507"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "605a55f9fef24c4e909784680aebc920", "runtime": 48, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.750753", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.773758"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.773996"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.782610"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "timestamp": "2023-09-06T19:47:48.796576"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.797558", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "fbf075e6cc984e51a6ff4fc26362d05e", "runtime": 57, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.813464", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.834575"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.834799"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.842738"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.856175"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.857054", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.858970", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2d7931b046254181b09a89b7a911ee0b", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.859212"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "2d7931b046254181b09a89b7a911ee0b", "timestamp": "2023-09-06T19:47:48.860055"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "2d7931b046254181b09a89b7a911ee0b", "runtime": 46, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.865173", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.886137"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.886389"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.894422"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "timestamp": "2023-09-06T19:47:48.906780"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4b66466da2e542fa8f5fb6015b013c43", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.907637", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "4b66466da2e542fa8f5fb6015b013c43", "runtime": 50, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:48.922752", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.942773"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.943004"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.950926"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.962899"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:48.963748", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.965775", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:48.966024"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "timestamp": "2023-09-06T19:47:48.966855"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "4e7a0c1b4b144fe1b6132729bba12e2f", "runtime": 43, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:48.971962", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:48.993135"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:48.993381"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:49.002040"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "timestamp": "2023-09-06T19:47:49.015735"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ea2e8f98466a4610826995dbfd41a65b", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.016710", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "ea2e8f98466a4610826995dbfd41a65b", "runtime": 54, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.031888", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.052070"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.052314"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.060186"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.071673"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.072446", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.074193", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "2b7d8e69420349839141078d0d4c8e86", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.074396"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "2b7d8e69420349839141078d0d4c8e86", "timestamp": "2023-09-06T19:47:49.075073"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "2b7d8e69420349839141078d0d4c8e86", "runtime": 42, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.079642", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.101011"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.101207"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.109246"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "timestamp": "2023-09-06T19:47:49.123558"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.124663", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "75ba181cb7fa4566a334c588d9b7cc54", "runtime": 54, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.141191", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.167289"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.167595"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.176620"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.191152"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.192058", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.194059", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.194306"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "timestamp": "2023-09-06T19:47:49.195117"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "76ee3bc8a9214c56b73f2a82c3e275b2", "runtime": 51, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.200316", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.222808"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.223122"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.232259"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "timestamp": "2023-09-06T19:47:49.247017"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "42018406d0a5436c95b396733b7a91f0", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.247833", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "42018406d0a5436c95b396733b7a91f0", "runtime": 58, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.264456", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.286854"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.287145"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.296142"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.310052"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.310879", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.313110", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.313354"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "timestamp": "2023-09-06T19:47:49.314166"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "46e83b1eb2c64764bcf75c1c111554f9", "runtime": 49, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.319353", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.339343"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.339594"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.347494"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "timestamp": "2023-09-06T19:47:49.360740"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "c982739f7635483c892e8b2e458c7419", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.361445", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "c982739f7635483c892e8b2e458c7419", "runtime": 50, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.375948", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.396070"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.396268"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.403900"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.418080"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.418868", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.420688", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.420893"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "timestamp": "2023-09-06T19:47:49.421564"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "9bd2dbe8da0642bd9ac2217ace612d78", "runtime": 44, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.426086", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.446413"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.446621"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.453723"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "timestamp": "2023-09-06T19:47:49.465631"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "ca00e687971d4e2085ec1863570cb6d7", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.466355", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "ca00e687971d4e2085ec1863570cb6d7", "runtime": 49, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.479660", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.499755"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.499981"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.507682"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.521168"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing POST", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.521897", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}
authentik_server        | {"auth_via": "unauthenticated", "event": "Found user", "host": "server:9000", "level": "debug", "logger": "authentik.flows.stage", "pid": 20, "query": "<Q: (OR: ('username__iexact', 'ldapservice'), ('email__iexact', 'ldapservice'))>", "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage": "ldap-identification-stage", "stage_view": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.523578", "user": "ldapservice"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Stage ok", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "984c56935d374b96bac9ed152b3bf72c", "stage_class": "authentik.stages.identification.stage.IdentificationStageView", "timestamp": "2023-09-06T19:47:49.523778"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Continuing with next stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "remaining": 2, "request_id": "984c56935d374b96bac9ed152b3bf72c", "timestamp": "2023-09-06T19:47:49.524486"}


authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "984c56935d374b96bac9ed152b3bf72c", "runtime": 43, "scheme": "http", "status": 302, "timestamp": "2023-09-06T19:47:49.528985", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): No active Plan found, initiating planner", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.555009"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): starting planning process", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.555251"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(plan): taking plan from cache", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "key": "goauthentik.io/flows/planner/f2165c26-ea64-41cd-8746-ed2b4d041d0c#None", "level": "debug", "logger": "authentik.flows.planner", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.564145"}
authentik_server        | {"auth_via": "unauthenticated", "current_stage": "<IdentificationStage: Stage ldap-identification-stage>", "event": "f(exec): Current stage", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "timestamp": "2023-09-06T19:47:49.578314"}
authentik_server        | {"auth_via": "unauthenticated", "event": "f(exec): Passing GET", "flow_slug": "ldap-authentication-flow", "host": "server:9000", "level": "debug", "logger": "authentik.flows.views.executor", "pid": 20, "request_id": "7209262c12f24ad19a4b5b51d092757e", "stage": "<IdentificationStage: Stage ldap-identification-stage>", "timestamp": "2023-09-06T19:47:49.579158", "view_class": "authentik.stages.identification.stage.IdentificationStageView"}

authentik_server        | {"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/ldap-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "server:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 20, "remote": "fd00:beef:245::3", "request_id": "7209262c12f24ad19a4b5b51d092757e", "runtime": 55, "scheme": "http", "status": 200, "timestamp": "2023-09-06T19:47:49.595371", "user": "", "user_agent": "goauthentik.io/outpost/2023.8.2"}
authentik_ldap_outpost  | {"bindDN":"cn=ldapservice,ou=users,dc=ldap,dc=authentik,dc=xxxxxx,dc=xxx","client":"fd00:beef:245::3","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"fff935fb-d647-41e5-9790-fb3162494aa7","timestamp":"2023-09-06T19:47:49Z"}
authentik_ldap_outpost  | {"bindDN":"cn=ldapservice,ou=users,dc=ldap,dc=authentik,dc=xxxxxx,dc=xxx","client":"fd00:beef:245::3","event":"Bind request","level":"info","requestId":"fff935fb-d647-41e5-9790-fb3162494aa7","timestamp":"2023-09-06T19:47:49Z","took-ms":1332}

Sep 06 '23 19:09 theS1LV3R

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Nov 06 '23 01:11 authentik-automation[bot]

Stale bots are the fucking worst!

Nov 06 '23 06:11 alyxto

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Jan 06 '24 01:01 authentik-automation[bot]

I don't even know why I keep this issue open anymore. Migrated away from authentik a while ago because of that.

But still annoyed by the stale bot. Just because you didn't fix the issue doesn't mean it's not a issue anymore! FU Stale bot!

Jan 06 '24 02:01 alyxto

I completely nuked everything I had of my LDAP setup (removed users, groups, integration, etc) and re-configured it, and it somehow worked, so I have no idea what was wrong, considering it was the exact same configuration as before

Jan 06 '24 14:01 theS1LV3R

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Mar 08 '24 01:03 authentik-automation[bot]

This issue has been automatically marked as active because it has not received any developer attention yet.

Mar 14 '24 10:03 alyxto

I would also like to bump this issue. Im running into the same problem with the default setup.

These are the trace logs the LDAP outpost gives:

{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got challenge","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:26Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:26Z","type":"native"}
{"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2024-03-21T22:43:27Z"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:27Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:28Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","component":"ak-stage-identification","event":"Got response","flow":"default-authentication-flow","level":"debug","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z","type":"native"}
{"bindDN":"cn=test,ou=users,dc=ldap,dc=goauthentik,dc=io","client":"172.25.0.1","error":"exceeded stage recursion depth","event":"failed to execute flow","level":"warning","requestId":"a0ddbdfc-2494-4d5b-939f-6895474eb69a","timestamp":"2024-03-21T22:43:29Z"}

This is what the server logs:

{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "b66eaccd86b9449f91e04101268d42ee", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.194374", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "55063059403d4d74b321670304810e4e", "runtime": 101, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:58.338275", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "116ad2f33b674905bd24706390c4b4cf", "runtime": 125, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.508842", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "8d7a1d18119e4896852522762ecdc2df", "runtime": 118, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:58.669960", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "91ec6ba390684611af167bb982210465", "runtime": 134, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:58.853351", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "828e0c5bbb4442dc8d96a7bbca989259", "runtime": 106, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.005995", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "409553011d5a422e879f001d8f15551a", "runtime": 141, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.193902", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "b0340c930f714721853d1d2a3435922c", "runtime": 110, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.353949", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "380615e293aa4998becf3717d5dbf137", "runtime": 124, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.522827", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "3fb6f209eb004f4cac62101511172afb", "runtime": 98, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:50:59.664325", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "a9b8c755ae934a7f9338eddf9c5cb310", "runtime": 137, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:50:59.844247", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "b6324cfef3b24e52824f54e2c46d1836", "runtime": 115, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.004946", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "e4a45a50bd244c39b6a8eeb9142e8444", "runtime": 125, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.175906", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "feb7c823637b4cd5aa1de3d5cc08efb2", "runtime": 106, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.325987", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "13d0c4f3702144b68a210f35ac63f02e", "runtime": 132, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.505185", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "401ac0781e1f4a25b4c4a4df18e53c04", "runtime": 105, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.656841", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "b65dae188ad94a7c925de40ab040c6b4", "runtime": 130, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:00.829910", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "5366f4c709cd409eb2aa6d03a6648b4d", "runtime": 107, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:00.984233", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "8c05cfc00b8c45aba559500e4747e85c", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:01.162275", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 57, "remote": "172.25.0.1", "request_id": "662984790853462fac2690effd9c778a", "runtime": 108, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-03-21T22:51:01.315316", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}
{"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/api/v3/flows/executor/default-authentication-flow/?query=goauthentik.io%252Foutpost%252Fldap%3Dtrue", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 57, "remote": "172.25.0.1", "request_id": "1be976c8d0d64678a9e7c191a2be9ff4", "runtime": 131, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-03-21T22:51:01.497481", "user": "", "user_agent": "goauthentik.io/outpost/2024.2.2"}

@theS1LV3R Would you be willing to share parts of your LDAP setup? Maybe I could find some discrepancies in my own setup. I'm at my wits end with this issue.

If the devs would what any extra info. Feel free to ask.

Mar 21 '24 23:03 TomKooiman

Apologies for the slow response;

I have set up the LDAP outpost with the following docker-compose service:

  ldap_outpost:
    image: ghcr.io/goauthentik/ldap:$_AUTHENTIK_TAG
    container_name: authentik_ldap_outpost
    restart: unless-stopped
    ports:
      - 127.0.0.1:3389:3389
      - 127.0.0.1:6636:6636
    environment:
      AUTHENTIK_HOST: https://authentik.example.com
      AUTHENTIK_TOKEN: verylongkeygottenfromwebui

In the web-ui I created a new outpost:

Name: ldap-outpost
Type: LDAP
Integration: --------- (since I have configured it manually there is no reason for authentik to create it using the docker integration)
Applications:
- jellyfin_ldap

My jellyfin_ldap provider is configured with both direct binding and querying, and uses the ldap-authentication-flow flow. No MFA support. I have a dedicated ldap_bind_group as Search Group. Under Protocol settings, Base DN is set to the default (DC=ldap,DC=goauthentik,DC=io). Changing this used to work fine, haven't tried again since I re-setup everything.

My ldap-authentication-flow is collapsed below (UUIDs have been edited just to make them easier to read).

ldap-authentication-flow.yml

```yml context: {} entries: - attrs: authentication: none denied_action: message_continue designation: authentication layout: stacked name: ldap-authentication-flow policy_engine_mode: any title: ldap-authentication-flow conditions: [] id: null identifiers: pk: 00000000-0000-0000-0000-000000000001 slug: ldap-authentication-flow model: authentik_flows.flow state: present - attrs: geoip_binding: no_binding network_binding: no_binding remember_me_offset: seconds=0 session_duration: seconds=0 conditions: [] id: null identifiers: name: ldap-authentication-login pk: 00000000-0000-0000-0000-000000000002 model: authentik_stages_user_login.userloginstage state: present - attrs: case_insensitive_matching: true password_stage: 00000000-0000-0000-0000-000000000003 pretend_user_exists: true show_matched_user: true user_fields: - username - email conditions: [] id: null identifiers: name: ldap-identification-stage pk: 00000000-0000-0000-0000-000000000004 model: authentik_stages_identification.identificationstage state: present - attrs: evaluate_on_plan: true invalid_response_action: retry policy_engine_mode: any conditions: [] id: null identifiers: order: 10 pk: 00000000-0000-0000-0000-000000000005 stage: 00000000-0000-0000-0000-000000000004 target: 00000000-0000-0000-0000-000000000001 model: authentik_flows.flowstagebinding state: present - attrs: evaluate_on_plan: true invalid_response_action: retry policy_engine_mode: any conditions: [] id: null identifiers: order: 30 pk: 00000000-0000-0000-0000-000000000006 stage: 00000000-0000-0000-0000-000000000002 target: 00000000-0000-0000-0000-000000000001 model: authentik_flows.flowstagebinding state: present metadata: labels: blueprints.goauthentik.io/generated: 'true' name: authentik Export - 2024-04-01 17:16:44.172372+00:00 version: 1 ```

The bind user is:

Username: ldap_bind_user
User type: Service account
Email:

The user is added to the ldap_bind_group as described above, as well as password set using the Set password button.

In Jellyfin, the LDAP plugin is configured as following:

LDAP Server: authentik_ldap_outpost
LDAP Port: 6636
Secure LDAP: true
StartTLS: false
LDAP Bind User: cn=ldap_bind_user,ou=users,DC=ldap,DC=goauthentik,DC=io
LDAP Bind User Password:
LDAP Base DN for searches: DC=ldap,DC=goauthentik,DC=io

Using these settings login to Jellyfin works as supposed. Let me know if there are any missing details.

Apr 01 '24 18:04 theS1LV3R

Thanks for sharing @theS1LV3R. No worries im late too.

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside? I have been testing again a bit and when I connect from my local PC to my server over a FQDN then it works, but when I connect to with LDAP outpost and the server on the same machine and try to connect the two within a docker bridge network I get this error. So the server configuration is clearly fine.

Weirdly enough when I tried the exact same setup on my local machine in WSL it did work. The only difference between my machine and my server is that the server runs Debian 12 and my WSL is Ubuntu 22.04. I cant imagine that makes a difference but yet here we are.

Apr 11 '24 21:04 TomKooiman

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside? I have been testing again a bit and when I connect from my local PC to my server over a FQDN then it works, but when I connect to with LDAP outpost and the server on the same machine and try to connect the two within a docker bridge network I get this error. So the server configuration is clearly fine.

Same behavior on my docker setup

Apr 28 '24 10:04 gassssss

Quick question. Do you connect the LDAP outpost via a docker network with the internal docker DNS name or do you connect to the outside?

The AUTHENTIK_HOST env var on the LDAP outpost is set to the external DNS name, so that connection goes outside of docker I believe.

Weirdly enough when I tried the exact same setup on my local machine in WSL it did work. The only difference between my machine and my server is that the server runs Debian 12 and my WSL is Ubuntu 22.04. I cant imagine that makes a difference but yet here we are.

WSLs network stack is very weird due to it being WSL, and that includes Docker unfortunately. So there could be a ton of other hidden differences.

Apr 28 '24 17:04 theS1LV3R

authentik authentik copied to clipboard

LDAP Outpost fails with "exceeded stage recursion depth"

authentik
authentik copied to clipboard