# LDAP Group Mapping Issue – groupMemberAttribute Hardcoded to member Instead of memberUid (v2.6.0)

**URL:** <https://forum.cirrus-link.com/t/ldap-group-mapping-issue-groupmemberattribute-hardcoded-to-member-instead-of-memberuid-v2-6-0/788>\
**Category:** Chariot MQTT Server\
**Created:** [August 11, 2025, 11:01am UTC](https://forum.cirrus-link.com/t/ldap-group-mapping-issue-groupmemberattribute-hardcoded-to-member-instead-of-memberuid-v2-6-0/788 "2025-08-11T11:01:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![arya\_d](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@arya\_d](https://forum.cirrus-link.com/u/arya_d)\
**Post date:** [August 11, 2025, 11:01am UTC](https://forum.cirrus-link.com/t/ldap-group-mapping-issue-groupmemberattribute-hardcoded-to-member-instead-of-memberuid-v2-6-0/788/1 "2025-08-11T11:01:38Z")

</div>

Hi Team,

I’m running Chariot MQTT **v2.6.0** on bare metal (systemd service) and am trying to integrate it with our **corporate LDAP** to authenticate users and map admin roles based on LDAP groups.

Our current setup:

- **LDAP Server:** `XXX` (POSIX-style groups)

- **User Search Base:** `XXXX`

- **Group Search Base:** `XXXX`

- **Group Attribute:** `memberUid`

- 

**Problem:**  
Chariot MQTT’s debug logs show that when it searches for groups, it always uses:

```bash
(member=uid=username,cn=users,dc=xxx,dc=xxxx) 

```

instead of:

```auto
(memberUid=username) 

```

This results in **Found User Groups: []** for all users, even though `ldapsearch` works fine.

**Suspected Cause:**  
From logs, it appears `groupMemberAttribute` is **hardcoded to `member`** in v2.6.0 and cannot be overridden in configuration. This is causing the mismatch for POSIX-style groups that use `memberUid` instead.

**Questions:**

1. Is there a way in **v2.6.0** to change the `groupMemberAttribute` to `memberUid` via config?

2. If not, is this supported in any later Chariot MQTT version?

Thanks for your help!

— Divyesh

---

<div class="post-metadata">

**Author:** ![segan4](https://avatars.discourse-cdn.com/v4/letter/s/f17d59/32.png) [@segan4](https://forum.cirrus-link.com/u/segan4)\
**Post date:** [August 13, 2025, 8:51pm UTC](https://forum.cirrus-link.com/t/ldap-group-mapping-issue-groupmemberattribute-hardcoded-to-member-instead-of-memberuid-v2-6-0/788/2 "2025-08-13T20:51:59Z")

</div>

Hi Divyesh,  
We don’t currently support that. Can I have you open a ticket directly with Cirrus Link Support and send over your logs? [Contact Support - Cirrus Link Solutions - Worldwide - United States](https://cirrus-link.com/contact-support/)  
Thanks,  
Segan