Unable to create another ldap Account if another account is linked to ldap group in the same domain
- 主要语言
- Java
- 星标
- 3.1k
- 派生
- 1.4k
- 平均合并
- 6 天 19 小时
- 30 天内合并 PR
- 32
描述
##### ISSUE TYPE
* Bug Report
##### COMPONENT NAME
~~~
ldap
~~~
##### CLOUDSTACK VERSION
~~~
4.19
~~~
##### CONFIGURATION
Advanced Networking, Domain tree with multiple subdomains
##### OS / ENVIRONMENT
RHEL 9.3
VMware 8.0c (8.0.0.3)
LDAP 389 Directory Server
##### SUMMARY
If I create ldap account in domain with ldapCreateAccount, then link this account to ldap group with linkAccountToLdap, I'm not able to create another account in the same domain. I got error:
CloudStack error: HTTP 534 response from CloudStack
{
"createaccountresponse": {
"cserrorcode": 9999,
"errorcode": 534,
"errortext": "No LDAP user exists with the username of test_user",
"uuidList": []
}
}
If I create multiple accounts with ldapCreateAccount first, then I'm able to link all these accounts to ldap groups with linkAccountToLdap. But again, not able to create any other new ldap accounts
##### STEPS TO REPRODUCE
~~~
cs --post ldapCreateAccount username=test_admin account='Test admins' accounttype=2 domainid=6xxxxxx0e-d170-48ea-a9bf-90fexxxxx122
cs --post linkAccountToLdap account='Test Admins' accounttype=2 domainid=6xxxxxx0e-d170-48ea-a9bf-90fexxxxx122 ldapdomain='cn=test admins,cn=test,ou=groups,dc=my,dc=domain,dc=com' type=GROUP
cs --post ldapCreateAccount username=test_users account='Test users' accounttype=0 domainid=6xxxxxx0e-d170-48ea-a9bf-90fexxxxx122
~~~
##### EXPECTED RESULTS
~~~
Create another account in ldap and link it to another ldap group
~~~
##### ACTUAL RESULTS
~~~
CloudStack error: HTTP 534 response from CloudStack
{
"createaccountresponse": {
"cserrorcode": 9999,
"errorcode": 534,
"errortext": "No LDAP user exists with the username of test_user",
"uuidList": []
}
}
~~~
贡献指南
调研方向
在所描述的 CloudStack 4.19 LDAP 配置中,使用 ldapCreateAccount,然后使用 linkAccountToLdap 重现该问题,接着检查 LDAP 账户创建和组链接的入口点。完成的标准是:能够在同一域中创建第二个账户,并将其链接到另一个 LDAP 组,且不出现 HTTP 534 错误;pull request #13945 已经打开。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- java
- 领域
- authentication
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 25/100