search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.54k stars 905 forks source link

LDAP outpost user entry does not contain `memberOf` for parent groups #6517

Closed astro-stan closed 9 months ago

astro-stan commented 1 year ago

Describe the bug The LDAP outpost does not seem to add memberOf entries for users who are indirect group members.

To Reproduce Steps to reproduce the behavior:

  1. Setup an ldap outpost
  2. Create a parent group
  3. Create a child group
  4. Assign a parent group for the child group to be the group created in step 2
  5. Add a user as a member only of the child group
  6. Verify no memberOf property for the parent group exists for the user with ldapsearch or similar tool.
  7. (Optional) assign the user to be a direct member of the parent group, rerun the LDAP search query and verify a memberOf property for the parent group now exists as well.

Expected behaviour One memberOf property per group per user regardless of whether the user is a direct or indirect member of the group.

Screenshots N/A

Logs N/A

Additional context N/A

astro-stan commented 1 year ago

Any update on this @BeryJu?

authentik-automation[bot] commented 11 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

astro-stan commented 11 months ago

Bump.

astro-stan commented 11 months ago

@BeryJu can you take a look at this please?

authentik-automation[bot] commented 9 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

astro-stan commented 9 months ago

This is still an issue.

@BeryJu can you take a look please?