Skip to content

LDAP groups not matching roles in 22.06.1 #3535

Description

@Montg0mery

Describe the Bug

After upgrading from 22.04.2 to 22.06.1, books which are restricted only to certain LDAP groups (using custom roles mapped by "external authentication ID") are not showing up.

I've double checked in LDAP, and the user is in the relevant group, the names match exactly, and when setting LDAP_DUMP_USER_GROUPS=true, I see the correct groups listed in the JSON output when logging in.

When using an admin account in BookStack, I can see that after those users log back in for the first time after the upgrade, they have been removed from the custom roles that they were previously in.

Downgrading back to 22.04.2 and having the users log back in fixed the issue.

Steps to Reproduce

  1. Have custom roles mapped to LDAP groups in 22.04.2
  2. Have books restricted so that only those roles can access them
  3. Upgrade to 22.06.1
  4. Observe that you can no longer access those books

Expected Behaviour

LDAP group mappings should work.

Screenshots or Additional Context

I can see that there is a change in 22.06 relating to commas in group names. These group names do not have any commas in them, they are just made up of ASCII letters and underscores.

Browser Details

No response

Exact BookStack Version

22.06.1

PHP Version

No response

Hosting Environment

Docker image: https://hub.docker.com/r/linuxserver/bookstack

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions