# Linux FreeIPA, LDAP, and ignition

**URL:** <https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999>\
**Category:** Ignition\
**Created:** [September 4, 2019, 12:40pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999 "2019-09-04T12:40:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mattn1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@mattn1](https://forum.inductiveautomation.com/u/mattn1)\
**Post date:** [September 4, 2019, 12:40pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/1 "2019-09-04T12:40:53Z")

</div>

I am struggling to connect to my companies instance of FreeIPA using the active directory user source. I believe the problem has to do with ignitions allowabled username/password. Using the ldapadmin tool I am able to log into the FreeIPA instance, but the username I am using is not accepted by ignition’s active directory.  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/c/cc9eba51d7658e7e67371bbd14646da951ea164a.png)  
Was wondering if anybody has gotten this to work or have tips on what I can try.

---

<div class="post-metadata">

**Author:** ![mattn1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@mattn1](https://forum.inductiveautomation.com/u/mattn1)\
**Post date:** [September 4, 2019, 1:06pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/2 "2019-09-04T13:06:59Z")

</div>

some additional information.  
log error

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/2/2db69ce75c336a2e13e7b5de3126258b958ccc13.png)

user source settings:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/c/cfbae5eaa76073fdc0e6180b0820da15c21a92c7.png)  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/5/5eab315717d6a1808eedad6dcdb34438fc34e5d2.png)  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/b/b9841bacbd215a1ff67b1d90f43a6ff0d9fec26e.png)  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/a/a9ecd23eb106d2ccce0859044a7f5cd882aa1ff4.png)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [September 4, 2019, 1:24pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/3 "2019-09-04T13:24:01Z")

</div>

Missing a comma at the start of your username suffix?

---

<div class="post-metadata">

**Author:** ![mattn1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@mattn1](https://forum.inductiveautomation.com/u/mattn1)\
**Post date:** [September 4, 2019, 1:30pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/4 "2019-09-04T13:30:27Z")

</div>

Thanks for chiming in, I did miss that comma. Not seeing users yet but no longer getting InvalidCredentials. Looks like I’m at least one step closer.

---

<div class="post-metadata">

**Author:** ![jd1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jd1/32/18928_2.png) [@jd1](https://forum.inductiveautomation.com/u/jd1)\
**Post date:** [September 24, 2021, 8:59pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/5 "2021-09-24T20:59:48Z")

</div>

Did you ever get this working?

---

<div class="post-metadata">

**Author:** ![mattn1](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@mattn1](https://forum.inductiveautomation.com/u/mattn1)\
**Post date:** [April 18, 2022, 5:54pm UTC](https://forum.inductiveautomation.com/t/linux-freeipa-ldap-and-ignition/27999/6 "2022-04-18T17:54:41Z")

</div>

No sorry.