Hello,
I have installed Gitea 1.24.5, it is running fine but I cannot get it to synchronize with my Active Directory using LDAPS.
When I try to log in with an AD user, I get “Username or password is incorrect”. Here’s what the gitea.log says:
2026/07/07 12:42:56 .../ldap/source_search.go:269:realSearchEntry() [E] LDAP Connect error, 192.168.10.110:LDAP Result Code 200 "Network Error": read tcp 192.168.12.130:61484->192.168.10.110:636: wsarecv: An existing connection was forcibly closed by the remote host.
The windows firewall on my DC machine is open for LDAPS and my DC machine is accessible from my server:
However, the interesting thing is that if I configure my DC machine to not require singing and change the gitea configuration to Unencrypted/port 389, it works and the same username and password can log in.
If I try to use Unencrypted/port 389 with the encryption enabled on the DC server, I get this error in the log:
2026/07/07 08:53:39 .../ldap/source_search.go:308:realSearchEntry() [D] Failed to bind as BindDN[cn=Gitea,ou=MyGroup,dc=MyCompany,dc=local]: LDAP Result Code 8 "Strong Auth Required": 00002028: LdapErr: DSID-0C09035A, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v65f4
Thank you
