Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-40264

LDAP groups for user don't get synced on first login

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • 6.18.0
    • 6.17.6
    • Authentication
    • None
    • False
    • sat-endeavour
    • None
    • None
    • None
    • None

      Description of problem:

      LDAP user is created in Satellite on first login without any roles and permissions assigned because the LDAP groups are not getting synced. The LDAP groups only get synced after running the refresh script manually.

      This issue happens when the following conditions are met:

      • Posix LDAP server
      • The LDAP group is not a pure Posix group because "groupOfUniqueNames" or "groupOfNames" module is enabled in the LDAP server.

      How reproducible:

      Easy

       

      Is this issue a regression from an earlier version:

      No

      Steps to Reproduce:

      1. Setup a Posix LDAP server and enable any of the group module/extension mentioned above.

      2. Create a user and a group. Assign user to the group

      3. Add the LDAP server as auth source in Satellite. Set server_type to "Posix"

      4. Map the usergroup with the LDAP group and assign some roles and permissions.

      5. Use the LDAP user to login to the Satellite web UI.

      Actual behavior:
      User created and login to the Satellite successfully, but no permissions are added to the account.

       

      Expected behavior:
      User created and login successfully with appropriate permissions.

       

              Unassigned Unassigned
              rhn-support-hyu Hao Chang Yu
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: