Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

LDAP auth module roles query incompatible with posixGroup based roles

#513

The included JettyCachingLdapLoginModule is not compatible out of the box with the "posixGroup" class that may be used for role membership in for example an openLDAP server.

the module expects the role class to have attributes listing user DNs, however the posixGroup class lists usernames.

the JettyCachingLdapLoginModule should be updated to support the case where username/id based attributes are used in the role class.

Reported by Greg Schueler · February 3rd, 2012 @ 03:27 PM

State: resolved
Milestone: Rundeck 1.4.2
Assigned to: Greg Schueler Greg Schueler

Activity

  1. Greg Schueler
    Greg Schueler
    • State changed from new to needs_verification

    (from [ab13669e695403090cfc14e3c1846376807a0488]) Update ldap login module to support username role attributes

    add roleUsernameMemberAttribute property

    [#513 LDAP auth module roles query incompatible with posixGroup based roles state:needs_verification] https://github.com/dtolabs/rundeck/commit/ab13669e695403090cfc14e3c...

    February 7th, 2012 @ 04:24 PM

  2. Greg Schueler
    Greg Schueler
    • State changed from needs_verification to resolved

    February 8th, 2012 @ 04:59 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.