Skip to content
English
Manage and Create Tickets
  • There are no suggestions because the search field is empty.

Cannot make secondary AD configuration work when authenticating with multiple AD

Original Question or Issue:

How can I correctly configure my FileCloud Server to authenticate against multiple AD servers?

Environment:

  • Product - FileCloud Server
  • Version - Any
  • Platform - Windows, Linux

Steps to Reproduce:

 

Error or Log Message:

The server error logs may contain the following error lines:

2026-04-21 10:56:29.520016 ERROR: [5256][17767401883497] failed to find user by email: filecloudsu@plant02.tontec.com on  10.13.0.112 with error: ldap_connect(): Could not create session handle: Bad parameter to an ldap routine []

2026-04-21 10:56:29.520383 DEBUG: [5256][17767401883497] tonidoCloudErrorHandler: Ignored error: DEPRECATED | 2026-04-21 10:56:29 | 8192 | mb_strtolower(): Passing null to parameter #1 ($string) of type string is deprecated | C:\xampp\htdocs\src\Core\Subsystem\Security\Auth\AD\ADAuth.php:0 []

2026-04-21 10:56:29.523923 ERROR: [5256][17767401883497] Error has occurred when authenticating user ``, error: Invalid credentials. []

2026-04-21 10:56:29.524111 DEBUG: [5256][17767401883497] User `` has NOT been authenticated. []

2026-04-21 10:56:29.524282 DEBUG: [5256][17767401883497] Sending response for checkadlogin with: httpCode=400 dataType=CommandDataHolder []

2026-04-21 10:56:29.530087 DEBUG: [5256][17767401883497] log : LOGGING AUDIT checkadlogin []

Defect or Enhancement Number:

 

Cause:

  • The adconfig.php file contains a misconfigured parameter
  • For integrating with active directories that are sub-domain of the primary active directory server, 

Resolution or Workaround:

  1. Make sure that the adconfig.php file is configured correctly.
    1. Make sure that the TONIDOCLOUD_MULTI_AD_ENABLE is set to 1.
    2. Ensure the AD parameters in the adconfig.php file has a suffix like _1. 
  2. If you are integrating a sub-domain AD of the primary AD, use the  TONIDOCLOUD_AD_LOGONNAMEPREFIX, instead of the  TONIDOCLOUD_AD_ACCOUNTSUFFIX. This will allow the FileCloud Server to search for the user/group from the AD.

Notes: