could user login, when user‘s group is in the LDAP_BASE_DN,but user outside the LDAP_BASE_DN? #3015

Closed
opened 2026-02-05 05:57:41 +03:00 by OVERLORD · 0 comments
Owner

Originally created by @Zhengyueewee2e on GitHub (Aug 25, 2022).

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

BookStack Version: v22.07

my .env profille
image

I have created role
image

my user:
CN=azheng,OU=test,DC=test,DC=com
CN=azheng3,OU=test2,DC=test,DC=com
my group
CN=test,OU=test,DC=test,DC=com
azheng and azheng3 are in the group
when LDAP_BASE_DN="ou=test,dc=test,dc=com"
azheng can login
azheng3 can't login error messages:user or password wrong

when LDAP_BASE_DN="dc=test,dc=com"
azheng and azheng3 can login both,and two user are in this test role
image

could user login, when user‘s group is in the LDAP_BASE_DN,but user outside the LDAP_BASE_DN?

Exact BookStack Version

v22.07

Log Content

No response

PHP Version

7.4.30

Hosting Environment

centos 7.9

Originally created by @Zhengyueewee2e on GitHub (Aug 25, 2022). ### Attempted Debugging - [X] I have read the debugging page ### Searched GitHub Issues - [X] I have searched GitHub for the issue. ### Describe the Scenario BookStack Version: v22.07 my .env profille ![image](https://user-images.githubusercontent.com/40627010/186552545-60bc9a46-843a-4690-8950-4b2611f1f92a.png) I have created role ![image](https://user-images.githubusercontent.com/40627010/186552674-22620749-8971-4fee-bdc5-78398878cf81.png) my user: CN=azheng,OU=test,DC=test,DC=com CN=azheng3,OU=test2,DC=test,DC=com my group CN=test,OU=test,DC=test,DC=com azheng and azheng3 are in the group when LDAP_BASE_DN="ou=test,dc=test,dc=com" azheng can login azheng3 can't login error messages:user or password wrong when LDAP_BASE_DN="dc=test,dc=com" azheng and azheng3 can login both,and two user are in this test role ![image](https://user-images.githubusercontent.com/40627010/186552711-441c4d91-6075-44c9-aa43-16a1c097c807.png) could user login, when user‘s group is in the LDAP_BASE_DN,but user outside the LDAP_BASE_DN? ### Exact BookStack Version v22.07 ### Log Content _No response_ ### PHP Version 7.4.30 ### Hosting Environment centos 7.9
OVERLORD added the 🐕 Support label 2026-02-05 05:57:41 +03:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#3015