-
Bug
-
Resolution: Done
-
Normal
-
6.17.6
-
None
-
False
-
sat-endeavour
-
None
-
None
-
None
-
None
Description of problem:
LDAP user is created in Satellite on first login without any roles and permissions assigned because the LDAP groups are not getting synced. The LDAP groups only get synced after running the refresh script manually.
This issue happens when the following conditions are met:
- Posix LDAP server
- The LDAP group is not a pure Posix group because "groupOfUniqueNames" or "groupOfNames" module is enabled in the LDAP server.
How reproducible:
Easy
Is this issue a regression from an earlier version:
No
Steps to Reproduce:
1. Setup a Posix LDAP server and enable any of the group module/extension mentioned above.
2. Create a user and a group. Assign user to the group
3. Add the LDAP server as auth source in Satellite. Set server_type to "Posix"
4. Map the usergroup with the LDAP group and assign some roles and permissions.
5. Use the LDAP user to login to the Satellite web UI.
Actual behavior:
User created and login to the Satellite successfully, but no permissions are added to the account.
Expected behavior:
User created and login successfully with appropriate permissions.
- links to