Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-8879

LDAP superuser search uses Quay namespace (e.g., u_user) instead of real LDAP username (e.g., u.user), causing lookup failures.

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • User Experience
    • Medium
    • Hide
      1. Login to Quay with an LDAP user: u.user.
      1. Quay creates namespace: u_user.
      1. As a superuser, apply a user search filter using u.user.
      1. Quay uses u_user in LDAP query, which fails.

      Expected (suggested): LDAP queries (especially by superusers) should use the actual LDAP username (u.user) rather than the namespace Quay generated (u_user).

      Show
      Login to Quay with an LDAP user: u.user . Quay creates namespace: u_user . As a superuser, apply a user search filter using u.user . Quay uses u_user in LDAP query, which fails. Expected (suggested): LDAP queries (especially by superusers) should use the actual LDAP username ( u.user ) rather than the namespace Quay generated ( u_user ).

      In an LDAP-integrated Quay environment, when a user logs in for the first time with a username like u.user, Quay automatically suggests and creates a namespace in the form u_user.

      Later, when a superuser applies a user filter (e.g., in the UI), the system appears to use the namespace name (u_user) to query LDAP instead of the real username (u.user). This results in a "not found" response, as LDAP has no user by the name u_user.

      It seems that the user filter or search feature is using the namespace name Quay created/suggested — not the actual LDAP identity. This might be unintentional or may need adjustment, especially in environments relying on exact LDAP usernames.

      This is based on observation — it’s possible this behavior is by design, but it causes practical issues in environments with dotted usernames and LDAP backends.

        1. image-2025-09-04-20-41-03-453.png
          344 kB
          luffy zhang
        2. image-2025-09-04-20-43-12-521.png
          317 kB
          luffy zhang

              Unassigned Unassigned
              andrewromanyebc Andrew Romany (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: