LDAP AD Primary Group and Roles #3526

New Issue

OVERLORD · 2026-02-05T07:01:23+03:00

OVERLORD commented

2026-02-05 07:01:23 +03:00

Originally created by @JamHeHe on GitHub (Feb 24, 2023).

Describe the Bug

I've associated our Domain Admin group to the Admin role in BookStack. I have one user who had the Domain Admin group set as the primary group for that user. In BookStack that user would not get associated to the Admin Role until I set the user's primary group to a different group.

Steps to Reproduce

Setup LDAP for AD
Associate Domain Admin Group to Admin Role
Set user's primary group to Domain Admin in AD
Login as user and see that Admin Role is not associated appropriately

Expected Behaviour

Admin access in BookStack regardless of Primary Group setup in AD.

Screenshots or Additional Context

No response

Browser Details

No response

Exact BookStack Version

23.01.1

PHP Version

8.1.2-1

Hosting Environment

Ubuntu 22.04 LTS

Originally created by @JamHeHe on GitHub (Feb 24, 2023). ### Describe the Bug I've associated our Domain Admin group to the Admin role in BookStack. I have one user who had the Domain Admin group set as the primary group for that user. In BookStack that user would not get associated to the Admin Role until I set the user's primary group to a different group. ### Steps to Reproduce 1. Setup LDAP for AD 2. Associate Domain Admin Group to Admin Role 3. Set user's primary group to Domain Admin in AD 4. Login as user and see that Admin Role is not associated appropriately ### Expected Behaviour Admin access in BookStack regardless of Primary Group setup in AD. ### Screenshots or Additional Context _No response_ ### Browser Details _No response_ ### Exact BookStack Version 23.01.1 ### PHP Version 8.1.2-1 ### Hosting Environment Ubuntu 22.04 LTS

OVERLORD added the 🐕 Support label 2026-02-05 07:01:23 +03:00

OVERLORD closed this issue

2026-02-05 07:01:27 +03:00

OVERLORD commented

2026-02-05 07:01:31 +03:00

@ssddanbrown commented on GitHub (Feb 24, 2023):

Hi @JamHeHe,

I can't really help from an active directory point of view.
I don't really know how steps 2 or 3 of your reproduction steps are performed or what they would actually result in.

All that BookStack cares about is that groups are provided on the LDAP_GROUP_ATTRIBUTE of the user fetched from the LDAP system upon login, and that group sync has been configured correctly.

I'm going to re-label this as a support issue since it's not clear there's any bug in BookStack.

@ssddanbrown commented on GitHub (Feb 24, 2023): Hi @JamHeHe, I can't really help from an active directory point of view. I don't really know how steps 2 or 3 of your reproduction steps are performed or what they would actually result in. All that BookStack cares about is that groups are provided on the `LDAP_GROUP_ATTRIBUTE` of the user fetched from the LDAP system upon login, and that group sync has been configured correctly. I'm going to re-label this as a support issue since it's not clear there's any bug in BookStack.

OVERLORD commented

2026-02-05 07:01:34 +03:00

@JamHeHe commented on GitHub (Feb 24, 2023):

Understood, and thanks. I agree that's it quite possibly not BookStack's
issue at all. I partially just wanted to get it posted somewhere to help
someone who may see a similar issue in the future and save them some time
and trouble, but couldn't find a forum or anything I could just post it in.

Thanks for all your work on BookStack!

On Fri, Feb 24, 2023 at 9:54 AM Dan Brown @.***> wrote:

Hi @JamHeHe https://github.com/JamHeHe,

I can't really help from an active directory point of view.
I don't really know how steps 2 or 3 of your reproduction steps are
performed or what they would actually result in.

All that BookStack cares about is that groups are provided on the
LDAP_GROUP_ATTRIBUTE of the user fetched from the LDAP system upon login,
and that group sync has been configured correctly.

I'm going to re-label this as a support issue since it's not clear there's
any bug in BookStack.

—
Reply to this email directly, view it on GitHub
https://github.com/BookStackApp/BookStack/issues/4064#issuecomment-1443886357,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/A3ZVCF6Q5GO3VM6SDVFAXW3WZDKTVANCNFSM6AAAAAAVG7TQSE
.
You are receiving this because you were mentioned.Message ID:
@.***>

@JamHeHe commented on GitHub (Feb 24, 2023): Understood, and thanks. I agree that's it quite possibly not BookStack's issue at all. I partially just wanted to get it posted somewhere to help someone who may see a similar issue in the future and save them some time and trouble, but couldn't find a forum or anything I could just post it in. Thanks for all your work on BookStack! On Fri, Feb 24, 2023 at 9:54 AM Dan Brown ***@***.***> wrote: > Hi @JamHeHe <https://github.com/JamHeHe>, > > I can't really help from an active directory point of view. > I don't really know how steps 2 or 3 of your reproduction steps are > performed or what they would actually result in. > > All that BookStack cares about is that groups are provided on the > LDAP_GROUP_ATTRIBUTE of the user fetched from the LDAP system upon login, > and that group sync has been configured correctly. > > I'm going to re-label this as a support issue since it's not clear there's > any bug in BookStack. > > — > Reply to this email directly, view it on GitHub > <https://github.com/BookStackApp/BookStack/issues/4064#issuecomment-1443886357>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/A3ZVCF6Q5GO3VM6SDVFAXW3WZDKTVANCNFSM6AAAAAAVG7TQSE> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> >

OVERLORD commented

2026-02-05 07:01:36 +03:00

@ssddanbrown commented on GitHub (Feb 24, 2023):

@JamHeHe Ah, okay and thanks!

I'll therefore close this off but if you need any additional help, from a BookStack specific perspective, or you do find a proven issue with BookStack's handling, feel free to still comment or open a new issue.

@ssddanbrown commented on GitHub (Feb 24, 2023): @JamHeHe Ah, okay and thanks! I'll therefore close this off but if you need any additional help, from a BookStack specific perspective, or you do find a proven issue with BookStack's handling, feel free to still comment or open a new issue.

OVERLORD referenced this issue

2026-02-05 10:26:59 +03:00

[PR #3526] [MERGED] New Crowdin updates #6212

Sign in to join this conversation.

Branches Tags

development

l10n_development

release

v26-03

ci_fixing

codeberg-actions

lexical_may_2026

MilnerMart/development

sort_rule_text

GamerClassN7/impersonations-for-admin

Zhey-on/feature/csp-image-css-controls-6033

tortillas5/development

clauvaldez/mfaReset

llm_only

vectors

McTom234/oidc-key-algorithms

docker_env

drawio_rendering

user_permissions

ldap_host_failover

svg_image

prosemirror

captcha_example

fix/video-export

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#3526