Support nested groups in LDAP
Nobody has claimed this yet.
- Dominant language
- Erlang
- Stars
- 303
- Forks
- 211
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 5
Description
From chef/oc_erchef#101:
It looks like the GroupDN filter in oc_erchef/apps/oc_chef_wm/src/oc_chef_wm_authn_ldap.erl breaks on nested groups. At first glance, it seems like enumerating GroupDN's nested groups' members would be the most rudimentary fix. That would also (probably) keep our Windows admins from putting a hit out on me.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in oc_erchef/apps/oc_chef_wm/src/oc_chef_wm_authn_ldap.erl and read how the GroupDN filter resolves group members. Done means nested-group members are recognized while existing LDAP group handling continues to work; the issue provides no test file or run command, so validation will need to follow the project's LDAP test setup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- erlang
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100