"You have to authenticate first" error

[KevinMitchell]

I've connected Stalwart to LLDAP. My bind credentials are set to

directory.ldap.bind.dn = "uid=admin,ou=people,dc=x,dc=y"
directory.ldap.bind.secret = "secret"

If I look at the logs when Stalwart is connecting I see this:

TRACE LDAP bind operation (store.ldap-bind) details = "uid=admin,ou=people,dc=x,dc=y"
DEBUG Authentication failed (auth.failed) listenerId = "http", localPort = 8080, remoteIp = 192.168.1.107, remotePort = 51081, remoteIp = 192.168.1.107, accountName = "admin"
TRACE HTTP response body (http.response-body) listenerId = "http", localPort = 8080, remoteIp = 192.168.1.107, remotePort = 51081, 
contents = "{"type":"about:blank","status":401,"title":"Unauthorized","detail":"You have to authenticate first."}", code = 401, size = 101

So Stalwart is trying to bind to the admin user so it can then authenticate other users, but it says I have to authenticate first. But that's what I'm trying to do...

If I check the LLDAP data I see this:

ldapsearch -x -H ldap://... -b "ou=people,dc=x,dc=y" -D "uid=admin,ou=people,dc=x,dc=y" -W "(uid=admin)"
Enter LDAP Password: 
# extended LDIF
#
# LDAPv3
# base <ou=people,dc=x,dc=y> with scope subtree
# filter: (uid=admin)
# requesting: ALL
#

# admin, people, x.y
dn: uid=admin,ou=people,dc=x,dc=y
cn: Administrator
createtimestamp: 2025-04-26T09:22:52.551704535+00:00
entryuuid: 298ae477-cfb6-3068-9a3d-8304f4ce92b6
mail: [email protected]
objectclass: inetOrgPerson
objectclass: posixAccount
objectclass: mailAccount
objectclass: person
uid: admin

So the entry is there, with the password I'm expecting. Unless the password specified in the Stalwart file maybe needs to be an encoded version?

Any ideas what might be causing this?

[KevinMitchell]

A thought just occurred to me that there are two admins. The admin user that can be used to log into stalwart. And the admin account from LDAP that is being used as the bind dn. They have different passwords. Hopefully Stalwart isn't being confused by the two of them...