LDAP Sync Now - Cannot read property 'bcrypt' of undefined

Community Support
1

Description

Existing LDAP users can login but all new created users can’t connect.

In LDAP settings:

  • Test Connection: is working
  • Test LDAP Search: is working
  • Sync Now: doesn’t work. error: Cannot read property ‘bcrypt’ of undefined

Server Setup Information

  • Version of Rocket.Chat Server: 4.5.4
  • Operating System: Ubuntu 20.04.4 LTS
  • Deployment Method: manual install
  • Number of Running Instances: 1
  • DB Replicaset Oplog: wiredTiger (oplog Enabled)
  • NodeJS Version: v14.19.1
  • MongoDB Version: 4.4.13
  • Proxy: nginx as reverse proxy
  • Firewalls involved: pfsense

Any additional Information

Apr 14 14:48:03 srv-rocket rocketchat[502334]: {"level":30,"time":"2022-04-14T12:48:03.302Z","pid":502334,"hostname":"srv-rocket","name":"LDAP","section":"Connection","msg":"Connecting","url":"ldap://ad1.domain.lan:389"}

Apr 14 14:48:03 srv-rocket rocketchat[502334]: {"level":20,"time":"2022-04-14T12:48:03.303Z","pid":502334,"hostname":"srv-rocket","name":"LDAP","section":"Connection","msg":"clientOptions","clientOptions":{"url":"ldap://ad1.domain.lan:389","timeout":60000,"connectTimeout":1000,"idleTimeout":1000,"reconnect":true,"log":{}}}

Apr 14 14:48:03 srv-rocket rocketchat[502334]: {"level":20,"time":"2022-04-14T12:48:03.410Z","pid":502334,"hostname":"srv-rocket","name":"LDAP","section":"Connection","clazz":"Client","ldap_id":"135__ldap://ad1.domain.lan:389","msg":"connected after 1 attempt(s) %j"}

Apr 14 14:48:03 srv-rocket rocketchat[502334]: {"level":30,"time":"2022-04-14T12:48:03.411Z","pid":502334,"hostname":"srv-rocket","name":"LDAP","section":"Bind","msg":"Binding UserDN","userDN":"cn=usrldap,cn=Users,dc=domain,dc=lan"}

Apr 14 14:48:03 srv-rocket rocketchat[502334]: {"level":35,"time":"2022-04-14T12:48:03.415Z","pid":502334,"hostname":"srv-rocket","name":"API","method":"POST","url":"/api/v1/ldap.testConnection","userId":"6HBRFzOpwyDWyzzMD","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Rocket.Chat/3.7.7 Chrome/96.0.4664.110 Electron/16.0.8 Safari/537.36","length":"2","host":"rocket.brunchstudio.tv","referer":"https://rocket.brunchstudio.tv/admin/LDAP","remoteIP":"A.B.C.D","status":200,"responseTime":121}

Apr 14 14:48:05 srv-rocket rocketchat[502334]: {"level":35,"time":"2022-04-14T12:48:05.017Z","pid":502334,"hostname":"srv-rocket","name":"API","method":"POST","url":"/api/v1/ldap.syncNow","userId":"6HBRFzOpwyDWyzzMD","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Rocket.Chat/3.7.7 Chrome/96.0.4664.110 Electron/16.0.8 Safari/537.36","length":"2","host":"rocket.brunchstudio.tv","referer":"https://rocket.brunchstudio.tv/admin/LDAP","remoteIP":"A.B.C.D","err":{"type":"errorClass","message":"TOTP Required [totp-required]","stack":"Error: TOTP Required [totp-required]\n    at checkCodeForUser (app/2fa/server/code/index.ts:195:9)\n    at APIClass.processTwoFactor (app/api/server/api.js:295:3)\n    at app/settings/server/Middleware.ts:8:3\n    at ee/server/api/api.ts:24:10\n    at APIClass.processTwoFactor (app/settings/server/Middleware.ts:12:10)\n    at Object._internalRouteActionHandler [as action] (app/api/server/api.js:417:11)\n    at Route._callEndpoint (packages/rocketchat_restivus/lib/route.coffee:150:32)\n    at packages/rocketchat_restivus/lib/route.coffee:59:33\n    at packages/simple_json-routes.js:100:9","isClientSafe":true,"error":"totp-required","reason":"TOTP Required","details":{"method":"password","codeGenerated":false,"availableMethods":[]},"errorType":"Meteor.Error"},"status":400,"responseTime":28,"msg":"TOTP Required [totp-required]"}

Apr 14 14:48:13 srv-rocket rocketchat[502334]: {"level":35,"time":"2022-04-14T12:48:13.429Z","pid":502334,"hostname":"srv-rocket","name":"API","method":"POST","url":"/api/v1/ldap.syncNow","userId":"6HBRFzOpwyDWyzzMD","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Rocket.Chat/3.7.7 Chrome/96.0.4664.110 Electron/16.0.8 Safari/537.36","length":"2","host":"rocket.brunchstudio.tv","referer":"https://rocket.brunchstudio.tv/admin/LDAP","remoteIP":"A.B.C.D","err":{"type":"TypeError","message":"Cannot read property 'bcrypt' of undefined","stack":"TypeError: Cannot read property 'bcrypt' of undefined\n    at AccountsServer.Accounts._checkPassword (packages/accounts-password/password_server.js:83:39)\n    at PasswordCheckFallback.verify (app/2fa/server/code/PasswordCheckFallback.ts:27:30)\n    at checkCodeForUser (app/2fa/server/code/index.ts:202:31)\n    at APIClass.processTwoFactor (app/api/server/api.js:295:3)\n    at app/settings/server/Middleware.ts:8:3\n    at ee/server/api/api.ts:24:10\n    at APIClass.processTwoFactor (app/settings/server/Middleware.ts:12:10)\n    at Object._internalRouteActionHandler [as action] (app/api/server/api.js:417:11)\n    at Route._callEndpoint (packages/rocketchat_restivus/lib/route.coffee:150:32)\n    at packages/rocketchat_restivus/lib/route.coffee:59:33\n    at packages/simple_json-routes.js:100:9"},"status":400,"responseTime":6,"msg":"Cannot read property 'bcrypt' of undefined"}
2

After activating totp on my admin account, I can run sync now. But do nothing, doesn’t add new users.

3

New LADP user can login after disabled Find user after login in setting LDAP > User search.