mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-07 19:06:05 +03:00
LDAP role membership issue where space in CN #1063
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @zebulun78 on GitHub (Feb 26, 2019).
I am having an issue with user roles being synchronized (or recognized) where the CN is a group with a space in the name. I am using ldap auth with AD, all auth is working fine without issue, but when I add a CN name of a group to the external_auth_id field for a role, that group is not recognized, and the user is not added to that group. It works fine for groups with no space. I have tried all sorts of variations of quotes and escaping, to no avail.
@zebulun78 commented on GitHub (Mar 4, 2019):
Bump. I am not sure if I explained this well enough. This is keeping me from being able to use this in our environment. I want to be able to manage user groups strictly via AD (LDAP) but cannot do so unless BookStack is able to use group CNs with spaces in the name.
@ssddanbrown commented on GitHub (Mar 8, 2019):
Hi @zebulun78,
This looks to be a problem with the docs being incomplete. I have assigned this to the next patch release as a reminder to update the docs.
When BookStack performs LDAP/System Group/Role comparison it will, for standardisation, lower-case ldap group names and replace spaces with hyphens.
For example, if I have an LDAP group of
United Kingdom, in the "External Auth ID" field of a role entering a value ofunited-kingdomshould allow them to match. I've just tested this myself to ensure this works. Sorry if this documentation omission caused you any trouble.Let me know if that works for you
@zebulun78 commented on GitHub (Mar 12, 2019):
Thank you sir!