search

openSUSE / obs-docu

Official Open Build Service Documentation. Content gets reviewed and edited. Generated books are available at http://www.openbuildservice.org
34 stars 70 forks source link

Clean OBS setup not checking `admin` group on LDAP server #180

Open byteduty opened 3 years ago

byteduty commented 3 years ago

Following the guide here: https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.administration.html

My interpretation of the documentation on this line:

ldap_obs_admin_group | Group name for OBS Admins |   | if set, members of that group become OBS admin role
-- | -- | -- | --

Is that anybody in the said LDAP group should have an Admin role on OBS?

However, although my LDAP works for a standard user login, none of the users who are members of the admin group have ADMIN privilege on OBS.

Additionally, I did some debugging on my openldap server, and I do not see a request for the ADMIN group at any time.

Does the option "ldap_obs_admin_group: obs-adm" actually work?

Thanks, Colin.

hennevogel commented 3 years ago

There is no trace of this option in the source code. This is a case of wrong documentation.

byteduty commented 3 years ago

@hennevogel Does this mean there is no means to describe the OBS users with admin privileges in LDAP? If so that is a fairly major hole in the LDAP support.

hennevogel commented 3 years ago

Can't say, I'm not too familiar with that part sorry.