netbox-community / netbox

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/free-netbox-cloud/
http://netboxlabs.com/oss/netbox/
Apache License 2.0
16.16k stars 2.59k forks source link

Active Directory NestedGroupOfNamesType is not applied #17560

Closed 1024834 closed 1 month ago

1024834 commented 1 month ago

Deployment Type

Self-hosted

NetBox Version

v4.1.1

Python Version

3.10

Steps to Reproduce

Configure LDAP authentication against an Active Directory in ldap_config.py, with permission inheritance like so: from django_auth_ldap.config import LDAPSearch, NestedGroupOfNamesType

Grant active state and read access to the default group "Domain Users $domain/Users".

Try to authenticate with a user that is not granted active state elsewhere.

Expected Behavior

The user should be able to log in and read.

Observed Behavior

The authentication succeeds on the AD without errors or warnings but the user is denied login with the error message "This account is inactive".

Screenshot 2024-09-20 125605

1024834 commented 1 month ago

System Information: netbox.json