DependencyTrack / DependencyTrack/dependency-track

Unable to authenticate when a user is part of Mapped LDAP groups

Open
#3,042 1 comment 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
9h 4m
Merged PRs (30d)
229

Description

### Current Behavior

I tried to add a Mapped LDAP group to a team
![image](https://github.com/DependencyTrack/dependency-track/assets/100369838/16df6ada-e85f-4aa1-b379-2e22bb618a27)
And then when user try to login, its not working and a error is thrown as below
![MicrosoftTeams-image](https://github.com/DependencyTrack/dependency-track/assets/100369838/daa3eb49-336f-4ba1-9f8f-c85fbf07e616)
Checking on the log file, i see a error message as below
![DTrack-error](https://github.com/DependencyTrack/dependency-track/assets/100369838/a04ae79f-34d1-406f-bfbe-ce16efa10b8a)

### Steps to Reproduce

1. Create a Team
2. Add a Mapped LDAP group
3. Try accessing the application using the account which is part of AD group

### Expected Behavior

account part of the AD group which is part of Mapped LDAP group should have access to the application

### Dependency-Track Version

4.8.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Research direction

Reproduce the failure by mapping an LDAP group to a team and signing in with an account from the AD group, then inspect the authentication error in the application log. Done means the mapped-group user can authenticate and access the application as expected.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.