Cloudron 8.2.4 - Configure LDAP leads to box.service crash

[BrutalBirdie]

2025-02-27T14:32:46.644Z TypeError: Converting circular structure to JSON
2025-02-27T14:32:46.644Z     --> starting at object with constructor 'Object'                                           2025-02-27T14:32:46.644Z     --- property 'issuerCertificate' closes the circle
2025-02-27T14:32:46.644Z     at JSON.stringify (<anonymous>)
2025-02-27T14:32:46.644Z     at new BoxError (/home/yellowtent/box/src/boxerror.js:13:154)
2025-02-27T14:32:46.644Z     at /home/yellowtent/box/src/externalldap.js:139:38
2025-02-27T14:32:46.644Z     at Client.callbackWrapper (/home/yellowtent/box/node_modules/ldapjs/lib/client/client.js:294:5)                                                                                                                    2025-02-27T14:32:46.644Z     at Client.emit (node:events:519:28)                                                        2025-02-27T14:32:46.644Z     at TLSSocket.onResult (/home/yellowtent/box/node_modules/ldapjs/lib/client/client.js:812:14)                                                                                                                       2025-02-27T14:32:46.644Z     at Object.onceWrapper (node:events:634:26)
2025-02-27T14:32:46.644Z     at TLSSocket.emit (node:events:519:28)
2025-02-27T14:32:46.644Z     at emitErrorNT (node:internal/streams/destroy:169:8)
2025-02-27T14:32:46.644Z     at emitErrorCloseNT (node:internal/streams/destroy:128:3)

Investigating.

[BrutalBirdie]

Somehow, this issue resolved itself overnight.
I mean yea nice, it solved itself, but I wanted to understand whhhyyyyyy.

Anyway.

#SOLVED

[joseph]

Per the backtrace, it seems the bind is not working . Is the Cloudron IP whitelisted?

[BrutalBirdie]

Yes.

Server 1:

Server 2:

That did not get touched.

[BrutalBirdie]

I got hooked and wanted more.

Can't I use the node.js debugger? I could? Right?

node inspect -p $(systemctl show --property MainPID --value box.service)
connecting to 127.0.0.1:9229 ... ok

Ah, so now I ssh tunnel into the server:

ssh -L 9229:localhost:9229 USER@my.DOMAIN.TLD

In chromium (my case Brave) I simply open chrome://inspect and can see the box.js and all other src files and set breakpoints and get a more in detail break log:

So I guess from the error in my original post it should be here:

2025-02-27T14:32:46.644Z     at /home/yellowtent/box/src/externalldap.js:139:38

Hmm this only throws the error in // ensure we don't just crash but we did exactly that
So the Issue seems to arise in the getClient function.

So it seems the ldap.createClient(ldapConfig) errors. Right?
I made sure it was not my super secure password causing some string escaping issue or anything by setting a basic hex string as the bind password.

Need to dig deeper! But not today. file:///home/eha/Downloads/2ea45b7a-52c2-4618-bcd1-ab49b8b2d4ee-image.png

[BrutalBirdie]

Somehow, this issue resolved itself overnight.
I mean yea nice, it solved itself, but I wanted to understand whhhyyyyyy.

Anyway.

#SOLVED