diff --git a/deploy-ai.sh b/deploy-ai.sh
index d2b3632..120bf62 100755
--- a/deploy-ai.sh
+++ b/deploy-ai.sh
@@ -814,6 +814,19 @@ case "$SITE" in
                 docker exec nginx-ai nginx -t && docker exec nginx-ai nginx -s reload"
         phase_done
 
+        # 注入 LLDAP admin 密码（LDAP 直接登录需要）
+        phase "注入 LLDAP admin 密码"
+        info "注入 LLDAP admin 密码到 issue-ai .env..."
+        ssh txjp "
+          LLDAP_ADMIN_PASS=\$(docker exec lldap printenv LLDAP_ADMIN_PASSWORD 2>/dev/null || echo '')
+          if [ -n \"\$LLDAP_ADMIN_PASS\" ]; then
+            grep -q '^LLDAP_ADMIN_PASSWORD=' $REMOTE_DIR/.env 2>/dev/null \
+              && sed -i \"s|^LLDAP_ADMIN_PASSWORD=.*|LLDAP_ADMIN_PASSWORD=\$LLDAP_ADMIN_PASS|\" $REMOTE_DIR/.env \
+              || echo \"LLDAP_ADMIN_PASSWORD=\$LLDAP_ADMIN_PASS\" >> $REMOTE_DIR/.env
+          fi
+        "
+        phase_done
+
         # 验证 issue→assets API 连通性（带重试，应对同时部署时目标容器暂不可达）
         phase "检查 API 连通性"
         info "检查 issue→assets API 连通性..."
@@ -855,6 +868,19 @@ CHECKEOF
                 docker exec nginx-ai nginx -t && docker exec nginx-ai nginx -s reload"
         phase_done
 
+        # 注入 LLDAP admin 密码（LDAP 直接登录需要）
+        phase "注入 LLDAP admin 密码"
+        info "注入 LLDAP admin 密码到 assets-ai .env..."
+        ssh txjp "
+          LLDAP_ADMIN_PASS=\$(docker exec lldap printenv LLDAP_ADMIN_PASSWORD 2>/dev/null || echo '')
+          if [ -n \"\$LLDAP_ADMIN_PASS\" ]; then
+            grep -q '^LLDAP_ADMIN_PASSWORD=' $REMOTE_DIR/.env 2>/dev/null \
+              && sed -i \"s|^LLDAP_ADMIN_PASSWORD=.*|LLDAP_ADMIN_PASSWORD=\$LLDAP_ADMIN_PASS|\" $REMOTE_DIR/.env \
+              || echo \"LLDAP_ADMIN_PASSWORD=\$LLDAP_ADMIN_PASS\" >> $REMOTE_DIR/.env
+          fi
+        "
+        phase_done
+
         # 验证 assets→issue API 连通性（带重试，应对同时部署时目标容器暂不可达）
         phase "检查 API 连通性"
         info "检查 assets→issue API 连通性..."