How to auth windows AD users by node.js?

I need to auth windows AD users recently. The scenario is below

  • Web pages runs at Server A ( Vue + vue-router )
  • Api interface runs at Server B ( node + express )
  • User input AD username & pwd on Web pages (Server A)
  • pass the username & pwd to the api interface on Server B to auth
  • Server B auth username & pwd via LDAP(windwos AD)
  • api on Server B returns the feedback to Web pages (Server A)

So, is there any solution could be implemented on Server B to auth username & pwd via LDAP?

Great thx!

Here is Solutions:

We have many solutions to this problem, But we recommend you to use the first solution because it is tested & true solution that will 100% work for you.

Solution 1

I have used nodesspi

But it is only for windows env. And it seems that u can get the results via browser only to visit server B directly. Not passing param to call api on server B.

Anyway, it is a good scenario to study for me.

Solution 2

I found the solution. refer to:
Node JS LDAP Auth User

var ldap = require('ldapjs');
var client = ldap.createClient({
  url: 'ldap://ldapserver:port/',
  timeout: 5000,
  connectTimeout: 10000
var opts = {
  filter: '(&(cn=*))',
  scope: 'sub',
  // This attribute list is what broke your solution
console.log('--- going to try to connect user ---');
try {
   client.bind(username, password, function (error) { //first need to bind
              client.unbind(function(error) {if(error){console.log  (error.message);} else{console.log('client disconnected');}});
    } else {
        console.log('connected');'ou=users, ou=compton, dc=batman, dc=com', opts, function(error, search) {

            search.on('searchEntry', function(entry) {
                    console.log('entry: %j ' + JSON.stringify(entry.object));
                client.unbind(function(error) {if(error){console.log(error.message);} else{console.log('client disconnected');}});

            search.on('error', function(error) {
                console.error('error: ' + error.message);
                client.unbind(function(error) {if(error){console.log(error.message);} else{console.log('client disconnected');}});

} catch(error){
   client.unbind(function(error) {if(error){console.log(error.message);}       else{console.log('client disconnected');}});

remember if you get ‘error~~~: Size Limit Exceeded’ error, use paged and sizeLimit param.

var opts = {
 filter: '(objectclass=commonobject)',
 scope: 'sub',
 paged: true,
 sizeLimit: 200

Note: Use and implement solution 1 because this method fully tested our system.
Thank you 🙂

All methods was sourced from or, is licensed under cc by-sa 2.5, cc by-sa 3.0 and cc by-sa 4.0

Leave a Reply