LDAP auth module roles query incompatible with posixGroup based roles
Reported by Greg Schueler | February 3rd, 2012 @ 03:27 PM | in Rundeck 1.4.2 (closed)
The included JettyCachingLdapLoginModule is not compatible out of the box with the "posixGroup" class that may be used for role membership in for example an openLDAP server.
the module expects the role class to have attributes listing user DNs, however the posixGroup class lists usernames.
the JettyCachingLdapLoginModule should be updated to support the case where username/id based attributes are used in the role class.
Comments and changes to this ticket
-
Greg Schueler February 7th, 2012 @ 04:24 PM
- State changed from new to needs_verification
(from [ab13669e695403090cfc14e3c1846376807a0488]) Update ldap login module to support username role attributes
add roleUsernameMemberAttribute property
[#513 state:needs_verification] https://github.com/dtolabs/rundeck/commit/ab13669e695403090cfc14e3c...
-
Greg Schueler February 8th, 2012 @ 04:59 PM
- State changed from needs_verification to resolved
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues