API Access Tokens Not Working With Active Directory Accounts

Weird issue, that i /think/ was working until recently. I just restarted my oxidized instance, and got and error, which seems to be related to the API auth token - no worries, I switched from local to AD auth, so I’ll just generate a new token - however i now get this:

image

No users in the dropdown. I read a few of the issues relating to this, can see that it was fixed last year, but note sure why my instance is not working. I tried adding $config[‘auth_api_local’] = true; to my config, but there is no difference.

any ideas, not sure what debug information i can provide.

AD bind config looks like this:

$config[‘auth_mechanism’] = “active_directory”;
$config[‘auth_ad_url’] = “ldap://domain.com”;
$config[‘auth_ad_domain’] = “domain.com”;
$config[‘auth_ad_base_dn’] = “dc=domain,dc=com”;
$config[‘auth_ad_check_certificates’] = false;
$config[‘auth_ad_binduser’] = ‘[email protected]’;
$config[‘auth_ad_bindpassword’] = ‘password!’;
$config[‘auth_ad_timeout’] = 5;
$config[‘auth_ad_debug’] = false;
$config[‘auth_ad_require_groupmembership’] = true;
$config[‘auth_ad_groups’][‘LibreNMS-RW’][‘level’] = 10;
$config[‘auth_ad_groups’][‘LibreNMS-RO’][‘level’] = 7;
$config[‘auth_ad_user_filter’] = “(objectclass=user)”;
$config[‘auth_ad_group_filter’] = “(objectclass=group)”;
$config[‘auth_api_local’] = true;

being looked at in Discord.

Issue was that the bind user was [email protected] - librenms automatically appends the domain to the username. If you append the domain name, it will work for logons, but fail for API token generation