I am setting up a Gitlab server for the first time. LDAP is working and I can get LDAP users to log into the UI. But I’m trying to link gitlab groups and LDAP AD groups, but the LDAP settings tab is missing. Where would I find and enable that option? Your help is much appreciated.

gitlab_rails[‘ldap_enabled’] = true

###! remember to close this block with ‘EOS’ below
gitlab_rails[‘ldap_servers’] = YAML.load <<-‘EOS’
main: # ‘main’ is the GitLab ‘provider ID’ of this LDAP server
label: ‘LDAP’
host: servername.domain.com
port: 636
uid: sAMAccountName
bind_dn: cn=accountname,ou=accounts,dc=domain,dc=name
password: password
encryption: simple_tls
verify_certificates: false
active_directory: true
allow_username_or_email_login: true
lowercase_usernames: false
block_auto_created_users: false
base: ou=Accounts,dc=domain,dc=name
user_filter: ‘’
## EE only
group_base: ou=name,ou=name,dc=domain,dc=name
admin_group: Group_name
sync_ssh_keys: false

secondary: # ‘secondary’ is the GitLab ‘provider ID’ of second LDAP server

label: ‘LDAP’

host: ‘_your_ldap_server’

port: 389

uid: ‘sAMAccountName’

bind_dn: ‘_the_full_dn_of_the_user_you_will_bind_with’

password: ‘_the_password_of_the_bind_user’

encryption: ‘plain’ # “start_tls” or “simple_tls” or “plain”

verify_certificates: true

active_directory: true

allow_username_or_email_login: false

lowercase_usernames: false

block_auto_created_users: false

base: ‘’

user_filter: ‘’

## EE only

group_base: ‘’

admin_group: ‘’

sync_ssh_keys: false

EOS

I should add we’re using the Gitlab-ee starter addition for now.

For GitLab release 11.6.2-ee: you have to navigate to a group / Settings.

settings1000×1094 75.4 KB

It would seem you can’t do group LDAP permissions with just the gitlab EE starter version. I unlocked that option when I enabled the trial license version. But thanks for your response.

I’m using a starter license.

When we weren’t using a license, so had just installed and configured the gitlab instance. I had expected the LDAP Synchronization to be available. But it wasn’t until I installed the starter license that that option was available.

Without a valid license the EE edition is just running in “CE mode” and this edition is not supporting LDAP groups!

Even with a Premium license, the LDAP Synchronization page is difficult to find.

Go to Admin Area/Groups and select a group.
Click on “Manage Access”.
The Settings popup menu contains “LDAP Synchronization”.