mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-05 00:29:48 +03:00
I can't update the External Authentication ID for LDAP #1547
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @struppy on GitHub (Feb 19, 2020).
I was using DistinguishedName as my Ad ID and wanted to switch to ObjectGUID.
For a new user no problem authentication with the ObjectGUID works and the field is automatically filled.
For a former user, replacing the initial value (DistinguishedName) with the ObjectGUID does not work ...
An idea because I cannot recreate all the users because of the preservation of their history.
Can you help me
@ssddanbrown commented on GitHub (Feb 19, 2020):
Hi @struppy,
This will be because BookStack stores the
idattribute to use as an identifier to connect a BookStack user to an LDAP user. You'll need to update the BookStack stored value for existing users if you want to change theidattribute used. BookStack shows this as the "External Authentication ID" field when editing a user's profile.If user a setting
LDAP_ID_ATTRIBUTE=BIN;objectGUIDthen the field will need to be updated to be the hex-representation of the user'sobjectGUIDvalue in AD.@struppy commented on GitHub (Feb 19, 2020):
In the ad id is: cd5e5a49d09c4846a427cdadba41a89e
and in the user profile it is the same.
The old value is the CN Path.
Do I have to remove BIN from the .env file?
@ssddanbrown commented on GitHub (Feb 19, 2020):
I don't have AD to test on, but if you want to use the
objectGUIDattribute as an ID I think you'd need to useLDAP_ID_ATTRIBUTE=BIN;objectGUIDso BookStack knows to decode the binary value.Are you simply taking the value shown in AD and removing hypens? It might be worth comparing values for one of the new users, to see if the values match in AD and BookStack. From some of the conversations I've seen, you may need to go to extra effort to view the
objectGUIDvalue as a similar hex value in AD.Here's an example of the difference in AD between the display value and the hex value:
https://exchangeinside.files.wordpress.com/2019/01/guid-to-hexa.jpg
@struppy commented on GitHub (Feb 20, 2020):
Great,
actually I was pasting the binary number instead of the hexadecimal one.
Thank you !
You can close the issue.
Bye
@ssddanbrown commented on GitHub (Feb 20, 2020):
@struppy Great, Happy to hear you got this working!