shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-23 22:50:09 +03:00
Code Releases Wiki Activity

F #1289 Add support for nested group in LDAP

Browse Source 
This permit to use the the LDAP_MATCHING_RULE_IN_CHAIN for nested group membership

Here is "ldap_auth.conf" config related 👍

    :group_field: 'member:1.2.840.113556.1.4.1941'
    :rfc2307bis: false

This fix #1289

Signed-off-by: Alexandre ROTA <alex@not24get.fr>
(cherry picked from commit 608189fb756e0b039aed2cf7bc9874c527022d9c)
This commit is contained in:
not24get 2022-08-25 18:19:42 +02:00 committed by Ruben S. Montero
parent 31a47e37a7
commit 2c4e7be77e
No known key found for this signature in database
GPG Key ID: A0CEA6FA880A1D87
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/authm_mad/remotes/ldap/ldap_auth.rb
View File

@ -168,7 +168,7 @@ class OpenNebula::LdapAuth
result=@ldap.search(
:base => group,
:attributes => [@options[:group_field]],
:filter => "(#{@options[:group_field]}=#{username})")
:filter => "(#{@options[:group_field]}:=#{username})")
if result && result.first
true
@ -202,7 +202,7 @@ class OpenNebula::LdapAuth
ldap_groups = [@user['memberOf']].flatten
else
group_base = @options[:group_base] ? @options[:group_base] : @options[:base]
filter = Net::LDAP::Filter.equals(@options[:group_field], @user[@options[:user_group_field]].first)
filter = Net::LDAP::Filter.ex(@options[:group_field], @user[@options[:user_group_field]].first)
ldap_groups = @ldap.search(
:base => group_base,
:attributes => [ "dn" ],