RocketChat / RocketChat/Rocket.Chat

LDAP user group filter not working?

Open
#5,900 13 comments 0 reactions 1 assignee View on GitHub

@rodrigok is already working on this.

Since Feb 4, 2017.

area: authentication
Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Hi there,

I'm trying out to set the LDAP user group filter with rocketchat. However this does not seem to work. I can login without the filter just fine via LDAP, but with Groups it is not possible, at least for me.

Here are my settings that I made in the Admin Frontend:

Group ObjectClass:  groupOfUniqueNames
Group ID Attribute: cn
Group Member Attribute: uniqueMember
Group Member Format: uid=#{uid},ou=People,dc=example,dc=com
Group name: Administrators,ou=Groups,dc=example,dc=com

The log on my ldap server then however shows me the following filter:

filter="(&(objectClass=groupOfUniqueNames)(uniqueMember=uid=#{uid},ou=People,dc=example,dc=com)(cn=Administrators,ou=Groups,dc=example,dc=com))"

And this does not seem to work to get an user back that belongs to a Group. I heard that this group membership check needs something like an ldapcompare method or so. Im using 389 LDAP server, but should be the same as in openldap

Can someone give me a hint what I'm doing wrong, or if this is really a bug and done the wrong way by rocketchat?

Rocket.Chat Version: 0.50.1
Running Instances: 1
DB Replicaset OpLog:
Node Version: 4.7.1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.