Skip to content
This repository has been archived by the owner on Oct 10, 2023. It is now read-only.

LDAPS User Search Username is a required field, not optional #637

Closed
2 of 9 tasks
miclettej opened this issue Sep 16, 2021 · 0 comments · Fixed by #953
Closed
2 of 9 tasks

LDAPS User Search Username is a required field, not optional #637

miclettej opened this issue Sep 16, 2021 · 0 comments · Fixed by #953
Assignees
Labels
area/ui Specific UI issue/enhancement area/ux UX related
Milestone

Comments

@miclettej
Copy link
Contributor

miclettej commented Sep 16, 2021

Bug description
Tracks community-edition ticket: vmware-tanzu/community-edition#1777

In the UI, the LDAPS User Search Username is marked as OPTIONAL. This is incorrect - it is REQUIRED. Without it, Pinniped package fails to reconcile

Affected product area (please put an X in all that apply)

  • APIs
  • Addons
  • CLI
  • Docs
  • Installation
  • Plugin
  • Security
  • Test and Release
  • User Experience

Expected behavior
User Search Username (e.g. userPrincipalName) and User Search Filter field should be required in UI

Steps to reproduce the bug

Version (include the SHA if the version is not obvious)
Eretria

Environment where the bug was observed (cloud, OS, etc)

Relevant Debug Output (Logs, manifests, etc)
% kubectl logs dex-999b6f97c-ssdlc -n tanzu-system-auth
{"level":"info","msg":"config using log level: info","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config issuer: https://0.0.0.0:30167","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"kubernetes client apiVersion = dex.coreos.com/v1","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"creating custom Kubernetes resources","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource authcodes.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource authcodes.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource authrequests.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource authrequests.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource oauth2clients.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource oauth2clients.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource signingkeies.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource signingkeies.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource refreshtokens.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource refreshtokens.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource passwords.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource passwords.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource offlinesessionses.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource offlinesessionses.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource connectors.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource connectors.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource devicerequests.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource devicerequests.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"checking if custom resource devicetokens.dex.coreos.com has been created already...","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"The custom resource devicetokens.dex.coreos.com already available, skipping create","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config storage: kubernetes","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config static client: pinniped","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config connector: ldap","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config response types accepted: [code]","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config skipping approval screen","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config signing keys expire after: 1h30m0s","time":"2021-09-16T11:16:23Z"}
{"level":"info","msg":"config id tokens valid for: 5m0s","time":"2021-09-16T11:16:23Z"}
failed to initialize server: server: Failed to open connector ldap: failed to open connector: failed to create connector ldap: ldap: missing required field "userSearch.username"

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
area/ui Specific UI issue/enhancement area/ux UX related
Projects
None yet
4 participants