Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Cannot Reproduce
-
Affects Version/s: 3.29.2, 3.30.0
-
Fix Version/s: None
-
Component/s: LDAP
-
Labels:
Description
SYMPTOM:
Trying to use the Nested Group for Windows AD.
The "testuser"'s DN is "CN=test user,OU=Test. Test (Test),DC=winkvm,DC=localdomain".
Using "groupMemberFormat": "${dn}" does not allow me to get the groups for this testuser (works with other users which do not belong to this OU).
FYI, using the following ldapsearch command works:
ldapsearch -x -H ldap://172.17.0.101:389 -D administrator@winkvm.localdomain -w '********' -b 'dc=winkvm,dc=localdomain' '(&(objectClass=group)(&(cn=*)(member:1.2.840.113556.1.4.1941:=CN=test user,OU=Test. Test \(Test\),DC=winkvm,DC=localdomain)))' cn member
EXPECTED BEHAVIOUR:
If this is caused by not escaping "()", not sure which exact characters should be escaped but probably at least "()" should be escaped if Windows AD is used.