Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-89748

Nested group does not receive memberOf attribute

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • rhel-10.1
    • rhel-8.10
    • 389-ds-base
    • 389-ds-base-3.1.3-2.el10
    • No
    • Moderate
    • ZStream
    • rhel-idm-ds
    • ssg_idm
    • Bug Fix
    • Hide
      .Directory Server correctly displays membership in nested groups

      Before this update, Directory Server displayed an incorrect value of the `memberOf` attribute in that entry under the following conditions:

      * An entry was a member of groups that had multiple nested levels
      * Groups were part of other different groups that had multiple paths in the membership relations.

      With this update, the `memberOf` distinguished name (DN) value is added systematically, and the entry membership in groups is displayed correctly.
      Show
      .Directory Server correctly displays membership in nested groups Before this update, Directory Server displayed an incorrect value of the `memberOf` attribute in that entry under the following conditions: * An entry was a member of groups that had multiple nested levels * Groups were part of other different groups that had multiple paths in the membership relations. With this update, the `memberOf` distinguished name (DN) value is added systematically, and the entry membership in groups is displayed correctly.
    • Done
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      This is a clone from upstream issue https://github.com/389ds/389-ds-base/issues/6571

      Problem repeats constantly in the next case (group names are important):

There are three groups: group1, group2, group21. There is one user: user1.

group21 is a member of group2.
user1 is a member of group1 and group21.

When I add group2 into group1, group21 does not receive memberof group1.

The problem can be solved by commenting the next block of code: https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/memberof/memberof.c#L3401C1-L3414C6

Does this check is correct and necessary ?

              idm-ds-dev-bugs IdM DS Dev
              vashirov@redhat.com Viktor Ashirov
              IdM DS Dev IdM DS Dev
              IdM DS QE IdM DS QE
              Evgenia Martyniuk Evgenia Martyniuk
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: