Bug 1394352
| Summary: | Users authenticated via external ldap contain no default context/location | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Bryan Kearney <bkearney> |
| Component: | Organizations and Locations | Assignee: | Daniel Lobato Garcia <dlobatog> |
| Status: | CLOSED ERRATA | QA Contact: | Kedar Bidarkar <kbidarka> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 6.0.3 | CC: | bbuckingham, bkearney, brubisch, chhudson, cwelton, daniele, dcaplan, dgross, egolov, gpayelka, jcallaha, jhunt, johan.bergstrom, juwu, kbidarka, mdavis, mtenheuv, pwaghmar, rmarti, wpinheir, xdmoon, yundtj |
| Target Milestone: | Unspecified | Keywords: | PrioBumpPM, Triaged |
| Target Release: | Unused | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| URL: | http://projects.theforeman.org/issues/6372 | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1104822 | Environment: | |
| Last Closed: | 2018-02-21 16:51:07 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1104822 | ||
| Bug Blocks: | 1115190, 1287901, 1353215 | ||
|
Comment 2
Bryan Kearney
2016-11-11 21:19:24 UTC
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/6372 has been resolved. This bug is verified with Sat6.3.0 satellite-6.3.0-snap11.0 Now upon trying to create a LDAP auth source, for the ldap auth source we need to specify the taxonomies ( i.e, ORG and LOC ). After, configuring external user-groups and upon the user trying to login to sat6, the user was able to inherit the ORG and LOC from the set values of LDAP auth source. ---- Some detailed explanation from the commit which fixes this issue, In an installation that uses taxonomies, when an user logs in for the first time and gets its account created via LDAP, it has no taxonomies. This was a problem, as even if the user has all the roles it needs from external user groups, an admin needs to manually set the taxonomies for every new user. This commit fixes that by assigning the taxonomies from the LDAP auth source to the user when it logs in for the first time. It does not update them on every login, as after the user has logged in, user taxonomies are left to the Foreman administrator to manage. ---- Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA.
>
> For information on the advisory, and where to find the updated files, follow the link below.
>
> If the solution does not work for you, open a new bug report.
>
> https://access.redhat.com/errata/RHSA-2018:0336
|