before update
After the update and the new password – the only usable/loaded configuration page
After logging out and logging in, the new password cannot be used.
LAM is unsable
hello from what version did you upgrade
I am not sure to understand what is occurring, can you reformulate please
I have the same problem here. You can change the password, but when you try to log in with it, it is not accepted. I get the message “No default profile set. Please set it in the server profile configuration.” But that doesn’t work because the previously created password doesn’t work. I am currently using version 1.1.4.
I think the issue is that they changed the config file to JSON and starting with version 9.4 (included in the last 1.1.4 app update) it’s required.
Main configuration and server profiles require latest file format (introduced in 9.0) (389)
The old config file can’t be read anymore.
After an update from 1.1.3 to 1.1.4 it’s working until the app is reconfigured and the ldap config file is rewritten in the old config file style.
A fresh 1.1.4 install didn’t work anymore. It asks for setting a new password but then it fails:
After saving the correct json config file lam.conf from version 1.1.3 and put it to 1.1.4 I was able to login again but after reconfiguring the lam app and changing domain it’s broken again.
The following file lam.conf needs to be in json now and I guess the config.cfg file too:
podman unshare nano $(podman volume inspect config --format={{.Mountpoint}})/lam.conf
Edit:
Maybe it’s enough to change the config templates to new ones…
2 Likes
Thank you for the advice, but I have no chance of guessing what I should do.
Sorry, it was more a dev note instead of an advice.
I already opened a pull request but GitHub didn’t create a package to test which would have been the simplest method.
You could downgrade to the previous version of LAM using following command. This command uses the force option which shouldn’t be used for conventional updates. After the downgrade you need to reconfigure the app. (Click save in NS8 app settings)
api-cli run update-module --data '{"module_url":"ghcr.io/stephdl/lam:1.1.3","instances":["lam1"],"force":true}'
or you could manually change the template files to check if it works:
Enter lam environment:
runagent -m lam1
Change the content of following files to the given json style…
../templates/ad.tmpl
{
"ServerURL": "ldap:\/\/accountprovider:${LDAP_PORT}",
"useTLS": "no",
"followReferrals": "false",
"pagedResults": "false",
"adShowDeleted": "false",
"Passwd": "{SSHA}3irB6JbX8hrfOE9Bv0kC8MhB7p8= r42VpA==",
"Admins": "${LDAP_ADMIN_USERS}",
"defaultLanguage": "en_US.utf8",
"scriptPath": "",
"scriptServer": "",
"scriptRights": "750",
"serverDisplayName": "${LDAP_DOMAIN}",
"activeTypes": "user,group,host",
"accessLevel": "100",
"loginMethod": "${LAM_LOGIN_METHOD}",
"loginSearchSuffix": "${LDAP_BASE}",
"loginSearchFilter": "sAMAccountName=%USER%",
"searchLimit": 0,
"lamProMailFrom": "noreply@example.com",
"lamProMailReplyTo": "",
"lamProMailSubject": "Your password was reset",
"lamProMailText": "Dear @@givenName@@ @@sn@@,+::++::+your password was reset to: @@newPassword@@+::++::++::+Best regards+::++::+deskside support+::+",
"lamProMailIsHTML": "false",
"lamProMailAllowAlternateAddress": "true",
"httpAuthentication": "false",
"loginSearchDN": "cn=ldapservice,CN=Users,${LDAP_BASE}",
"loginSearchPassword": "${LDAP_PASS}",
"timeZone": "UTC",
"jobsBindUser": "",
"jobsBindPassword": "",
"jobsDatabase": "SQLite",
"jobsDBHost": "",
"jobsDBPort": "",
"jobsDBCaPath": null,
"jobsDBUser": "",
"jobsDBPassword": "",
"jobsDBName": "",
"pwdResetAllowSpecificPassword": "true",
"pwdResetAllowScreenPassword": "true",
"pwdResetForcePasswordChange": "true",
"pwdResetDefaultPasswordOutput": "2",
"scriptUserName": "",
"scriptSSHKey": "",
"scriptSSHKeyPassword": "",
"twoFactorAuthentication": "none",
"twoFactorAuthenticationURL": "https:\/\/localhost",
"twoFactorAuthenticationInsecure": false,
"twoFactorAuthenticationLabel": "",
"twoFactorAuthenticationOptional": false,
"twoFactorAuthenticationCaption": "",
"twoFactorAuthenticationClientId": "",
"twoFactorAuthenticationSecretKey": "",
"twoFactorAuthenticationDomain": "",
"twoFactorAuthenticationAttribute": "uid",
"twoFactorAllowToRememberDevice": "false",
"twoFactorRememberDeviceDuration": "28800",
"twoFactorRememberDevicePassword": "M.gIZEISM-zJOLAWOnKrfJdEi68lvC",
"referentialIntegrityOverlay": "false",
"hidePasswordPromptForExpiredPasswords": "false",
"hideDnPart": "CN=Users,${LDAP_BASE}",
"pwdPolicyMinLength": "",
"pwdPolicyMinLowercase": "",
"pwdPolicyMinUppercase": "",
"pwdPolicyMinNumeric": "",
"pwdPolicyMinSymbolic": "",
"typeSettings": {
"suffix_user": "${LDAP_BASE}",
"attr_user": "#cn;#displayName",
"modules_user": "windowsUser",
"suffix_group": "${LDAP_BASE}",
"attr_group": "#cn;#description;#member",
"modules_group": "windowsGroup",
"suffix_host": "${LDAP_BASE}",
"attr_host": "#cn;#description",
"suffix_smbDomain": "${LDAP_BASE}",
"attr_smbDomain": "#sambaDomainName;#sambaSID",
"modules_host": "windowsHost"
},
"moduleSettings": {
"windowsGroup_hidemail": [
"false"
],
"windowsGroup_hidemanagedBy": [
"false"
],
"windowsGroup_hidemsSFU30Name": [
"true"
],
"windowsGroup_hidemsSFU30NisDomain": [
"true"
],
"windowsUser_displayGroups": [
"CN"
],
"windowsUser_hidebusinessCategory": [
"true"
],
"windowsUser_hidecarLicense": [
"true"
],
"windowsUser_hidecompany": [
"true"
],
"windowsUser_hidedepartment": [
"true"
],
"windowsUser_hidedepartmentNumber": [
"true"
],
"windowsUser_hidedescription": [
"false"
],
"windowsUser_hidedisplayName": [
"false"
],
"windowsUser_hidemail": [
"false"
],
"windowsUser_hideotherMailbox": [
"false"
],
"windowsUser_hideemployeeNumber": [
"true"
],
"windowsUser_hideemployeeType": [
"true"
],
"windowsUser_hidefacsimileTelephoneNumber": [
"false"
],
"windowsUser_hidehomeDirectory": [
"false"
],
"windowsUser_hidehomeDrive": [
"false"
],
"windowsUser_hideinitials": [
"false"
],
"windowsUser_hidetitle": [
"true"
],
"windowsUser_hidelastLogonTimestamp": [
"false"
],
"windowsUser_hidepwdLastSet": [
"false"
],
"windowsUser_hidel": [
"false"
],
"windowsUser_hidescriptPath": [
"false"
],
"windowsUser_hidemanager": [
"true"
],
"windowsUser_hidemobile": [
"false"
],
"windowsUser_hidemsSFU30NisDomain": [
"true"
],
"windowsUser_hidemsSFU30Name": [
"true"
],
"windowsUser_hidephysicalDeliveryOfficeName": [
"false"
],
"windowsUser_hideo": [
"true"
],
"windowsUser_hideou": [
"true"
],
"windowsUser_hideotherMobile": [
"true"
],
"windowsUser_hideotherPager": [
"true"
],
"windowsUser_hideotherTelephone": [
"false"
],
"windowsUser_hideurl": [
"false"
],
"windowsUser_hidepager": [
"true"
],
"windowsUser_hidejpegPhoto": [
"true"
],
"windowsUser_hidepostOfficeBox": [
"false"
],
"windowsUser_hidepostalCode": [
"false"
],
"windowsUser_hideprofilePath": [
"false"
],
"windowsUser_hideproxyAddresses": [
"true"
],
"windowsUser_hideRequireSmartcard": [
"false"
],
"windowsUser_hidest": [
"false"
],
"windowsUser_hidestreetAddress": [
"false"
],
"windowsUser_hidetelephoneNumber": [
"false"
],
"windowsUser_hidesAMAccountName": [
"true"
],
"windowsUser_hidewWWHomePage": [
"false"
],
"windowsUser_hideWorkstations": [
"false"
]
},
"toolSettings": {
"treeViewSuffix": "${LDAP_BASE}",
"tool_hide_toolFileUpload": "false",
"tool_hide_ImportExport": "false",
"tool_hide_toolMultiEdit": "false",
"tool_hide_toolOUEditor": "false",
"tool_hide_toolPDFEditor": "false",
"tool_hide_toolProfileEditor": "false",
"tool_hide_toolSchemaBrowser": "false",
"tool_hide_toolServerInformation": "false",
"tool_hide_toolTests": "false",
"tool_hide_TreeViewTool": "false",
"tool_hide_toolWebauthn": "false"
},
"jobSettings": []
}
../templates/rfc2307.tmpl
{
"ServerURL": "ldap:\/\/accountprovider:${LDAP_PORT}",
"useTLS": "no",
"followReferrals": "false",
"pagedResults": "false",
"adShowDeleted": "false",
"Passwd": "{SSHA}3irB6JbX8hrfOE9Bv0kC8MhB7p8= r42VpA==",
"Admins": "${LDAP_ADMIN_USERS}",
"defaultLanguage": "en_US.utf8",
"scriptPath": "",
"scriptServer": "",
"scriptRights": "750",
"serverDisplayName": "${LDAP_DOMAIN}",
"activeTypes": "user,group",
"accessLevel": "100",
"loginMethod": "${LAM_LOGIN_METHOD}",
"loginSearchSuffix": "${LDAP_BASE}",
"loginSearchFilter": "uid=%USER%",
"searchLimit": 0,
"lamProMailFrom": "noreply@example.com",
"lamProMailReplyTo": "",
"lamProMailSubject": "Your password was reset",
"lamProMailText": "Dear @@givenName@@ @@sn@@,+::++::+your password was reset to: @@newPassword@@+::++::++::+Best regards+::++::+deskside support+::+",
"lamProMailIsHTML": "false",
"lamProMailAllowAlternateAddress": "true",
"httpAuthentication": "false",
"loginSearchDN": "cn=ldapservice,${LDAP_BASE}",
"loginSearchPassword": "${LDAP_PASS}",
"timeZone": "UTC",
"jobsBindUser": "",
"jobsBindPassword": "",
"jobsDatabase": "SQLite",
"jobsDBHost": "",
"jobsDBPort": "",
"jobsDBCaPath": null,
"jobsDBUser": "",
"jobsDBPassword": "",
"jobsDBName": "",
"pwdResetAllowSpecificPassword": "true",
"pwdResetAllowScreenPassword": "true",
"pwdResetForcePasswordChange": "true",
"pwdResetDefaultPasswordOutput": "2",
"scriptUserName": "",
"scriptSSHKey": "",
"scriptSSHKeyPassword": "",
"twoFactorAuthentication": "none",
"twoFactorAuthenticationURL": "https:\/\/localhost",
"twoFactorAuthenticationInsecure": false,
"twoFactorAuthenticationLabel": "",
"twoFactorAuthenticationOptional": false,
"twoFactorAuthenticationCaption": "",
"twoFactorAuthenticationClientId": "",
"twoFactorAuthenticationSecretKey": "",
"twoFactorAuthenticationDomain": "",
"twoFactorAuthenticationAttribute": "uid",
"twoFactorAllowToRememberDevice": "false",
"twoFactorRememberDeviceDuration": "28800",
"twoFactorRememberDevicePassword": "aEGazmS.2-rIB4pJ1pkzupPwPrRuPn",
"referentialIntegrityOverlay": "false",
"hidePasswordPromptForExpiredPasswords": "false",
"hideDnPart": "ou=People,${LDAP_BASE}",
"pwdPolicyMinLength": "",
"pwdPolicyMinLowercase": "",
"pwdPolicyMinUppercase": "",
"pwdPolicyMinNumeric": "",
"pwdPolicyMinSymbolic": "",
"typeSettings": {
"suffix_user": "${LDAP_BASE}",
"attr_user": "#uid;#displayName",
"modules_user": "inetOrgPerson,posixAccount,shadowAccount",
"suffix_group": "${LDAP_BASE}",
"attr_group": "#cn;#memberUID;#description",
"modules_group": "posixGroup"
},
"moduleSettings": {
"posixAccount_user_minUID": [
"10000"
],
"posixAccount_user_maxUID": [
"30000"
],
"posixAccount_host_minMachine": [
"50000"
],
"posixAccount_host_maxMachine": [
"60000"
],
"posixGroup_group_minGID": [
"10000"
],
"posixGroup_group_maxGID": [
"20000"
],
"posixAccount_user_uidGeneratorUsers": [
"range"
],
"posixAccount_host_uidGeneratorUsers": [
"range"
],
"posixAccount_group_gidGeneratorUsers": [
"range"
],
"posixGroup_pwdHash": [
"SSHA"
],
"posixAccount_pwdHash": [
"SSHA"
]
},
"toolSettings": {
"treeViewSuffix": "${LDAP_BASE}",
"tool_hide_toolFileUpload": "false",
"tool_hide_ImportExport": "false",
"tool_hide_toolMultiEdit": "false",
"tool_hide_toolOUEditor": "false",
"tool_hide_toolPDFEditor": "false",
"tool_hide_toolProfileEditor": "false",
"tool_hide_toolSchemaBrowser": "false",
"tool_hide_toolServerInformation": "false",
"tool_hide_toolTests": "false",
"tool_hide_TreeViewTool": "false",
"tool_hide_toolWebauthn": "false"
},
"jobSettings": []
}
../templates/config.cfg.tmpl
{
"password": "{SSHA}og9MdeYRopbiWGb+jY+q58rZcIk= Nn87oA==",
"default": "lam",
"sessionTimeout": "30",
"hideLoginErrorDetails": "false",
"logLevel": "4",
"logDestination": "SYSLOG",
"allowedHosts": "",
"passwordMinLength": "0",
"passwordMinUpper": "0",
"passwordMinLower": "0",
"passwordMinNumeric": "0",
"passwordMinClasses": "0",
"passwordMinSymbol": "0",
"checkedRulesCount": "-1",
"passwordMustNotContainUser": "false",
"passwordMustNotContain3Chars": "false",
"externalPwdCheckUrl": "",
"errorReporting": "default",
"allowedHostsSelfService": "",
"license": "",
"licenseEmailFrom": "",
"licenseEmailTo": "",
"licenseWarningType": "",
"licenseEmailDateSent": "",
"mailServer": "",
"mailUser": "",
"mailPassword": "",
"mailEncryption": "",
"mailAttribute": "mail",
"mailBackupAttribute": "passwordselfresetbackupmail",
"configDatabaseType": "files",
"configDatabaseServer": "",
"configDatabasePort": "",
"configDatabaseName": "",
"configDatabaseUser": "",
"configDatabasePassword": "",
"configDatabaseSSLCA": "",
"moduleSettings": "W10=",
"smsProvider": "",
"smsApiKey": "",
"smsToken": "",
"smsAccountId": "",
"smsRegion": "",
"smsFrom": "",
"smsAttributes": "mobileTelephoneNumber;mobile",
"smsDefaultCountryPrefix": ""
}
…and reconfigure the app.
1 Like
Thanks for the explanation, now even I understand.
However, as I am not under any immediate pressure to act, I have uninstalled lam and will wait until you release a working version.
3 Likes
I will try to fix it this week
3 Likes
thank @mrmarkuz for the PR, I am going to test it 
1 Like
I released Release 1.2.0 · stephdl/ns8-lam · GitHub
3 Likes
And everything works fine. Happy new year @stephdl and thank you for the great support.
Uwe
3 Likes
Dear Steph,
as always, quick and reliable fix. A thousand thanks for that.
But please allow me to offer a small, well-intentioned piece of advice from an old fart with painful experience, even though I am a major beneficiary of your commitment and helpfulness.
Was it really worth sacrificing your holiday time for this? Whether the fix comes a week or two earlier or later is practically meaningless.
I hope you don’t fall back into your self-exploitative behaviour patterns. The next heart attack is just around the corner, waiting for you to work overtime.
I take the liberty of pointing this out because I myself barely survived last year and am familiar with such patterns of behaviour. I therefore hope you do not find this presumptuous.
I wish you all the best for the new year, stay healthy and enjoy life.
3 Likes
Hello @capote
Thanks and keep you safe….I was at work, the few of the crew at work tuesday and wednesday, I reproduced an interesting bug with set-certificate, I fixed your bug…..that was something cool for two days.
As I stated, 2025 was horrible, I hope a lot for 2026, coming back to via ferrata and bike as before
2 Likes