nextcloud / nextcloud/user_saml

merge users (same sAMAccountName) - ldap / keycloak

Open
#622 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
104
Forks
85
Avg merge
1d 15h
Merged PRs (30d)
16

Description

Steps to reproduce
  1. Use KeyCloak for auth
  2. Trying login via Kerberos
  3. Get another user
Expected behaviour

Although this is a different authorization method, the user must be defined as existing.

Actual behaviour

New user created with the same username and full name

Server configuration

Operating system: RHEL

Web server: Apache

Database: MySQL

PHP version: 8

Nextcloud version: (see Nextcloud admin page) 23.0

for example pin message:

image

How to enable or define the user mapping feature.
The same samaccountname are defined as different users. We want to map already existing users to those who log in using kerberos authorization.

We tried using social-login and OpenID Connect user backend and preferred_username.

Thanks for any help!

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the issue using Keycloak or Kerberos authentication with the listed Nextcloud 23, RHEL, Apache, MySQL, and PHP 8 configuration. Trace the user authentication and mapping flow to determine how an existing username is matched; done means the alternate authorization method maps to the existing user instead of creating a duplicate.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.