From 6559daeac5bc409096f7ed348e581cbf68881c79 Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Mon, 12 Jan 2026 10:28:09 -0800 Subject: [PATCH] Update weed/iam/ldap/ldap_provider.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- weed/iam/ldap/ldap_provider.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/weed/iam/ldap/ldap_provider.go b/weed/iam/ldap/ldap_provider.go index e682badda..6b02e9a3f 100644 --- a/weed/iam/ldap/ldap_provider.go +++ b/weed/iam/ldap/ldap_provider.go @@ -383,7 +383,7 @@ func (p *LDAPProvider) Authenticate(ctx context.Context, credentials string) (*p if err = conn.Bind(config.BindDN, config.BindPassword); err != nil { glog.V(2).Infof("LDAP rebind to service account failed: %v", err) conn.Close() // Close on error, don't return to pool - return nil, fmt.Errorf("LDAP rebind failed: %w", err) + return nil, fmt.Errorf("LDAP service account rebind failed after successful user authentication (check bindDN %q and its credentials): %w", config.BindDN, err) } } // Now safe to defer return to pool with clean service account binding