Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option 'AuthSyncModule::LDAP::GroupDN' is not working #2500

Closed
StefanRother-OTOBO opened this issue Sep 14, 2023 · 0 comments
Closed

Option 'AuthSyncModule::LDAP::GroupDN' is not working #2500

StefanRother-OTOBO opened this issue Sep 14, 2023 · 0 comments
Assignees
Labels
bug Something isn't working as intended
Milestone

Comments

@StefanRother-OTOBO
Copy link
Contributor

In the OTOBO configuration for LDAP user synchronisation, the option $Self->{'AuthSyncModule::LDAP::GroupDN'} exists so that only certain groups are synchronised.
However, the check of the option is so far only implemented in $Self->{'AuthModule::LDAP::GroupDN'}, as it is normally not needed during synchronisation.

However, there is a special case when Kerberos SSO is configured, the web server takes over the authentication and we can only restrict the general access to the OTOBO agent interface by not creating the user in OTOBO if he is not included in the group.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working as intended
Projects
None yet
Development

No branches or pull requests

2 participants