Description of problem: When doing external authenticaiton if "Get User Groups from External Authentication (httpd)" is not checked user records with a userid in UPN format are not matched. There are situations when the userid could be in UPN format and need to be matched.
https://github.com/ManageIQ/manageiq/pull/16069
New commit detected on ManageIQ/manageiq/master: https://github.com/ManageIQ/manageiq/commit/2ba8f0c7617e8446ab87b7d9514772845b1824db commit 2ba8f0c7617e8446ab87b7d9514772845b1824db Author: Joe VLcek <jvlcek> AuthorDate: Thu Sep 28 18:03:13 2017 -0400 Commit: Joe VLcek <jvlcek> CommitDate: Fri Sep 29 10:46:50 2017 -0400 Always check for userid as UPN Always check for userid in UPN format, even when "Get User Groups from External Authentication (httpd)" is not checked https://bugzilla.redhat.com/show_bug.cgi?id=1496979 app/models/authenticator/base.rb | 4 +-- app/models/authenticator/httpd.rb | 9 ++++++ spec/models/authenticator/httpd_spec.rb | 51 ++++++++++++++++++++++++--------- 3 files changed, 48 insertions(+), 16 deletions(-)
https://github.com/ManageIQ/manageiq/pull/16079
*** Bug 1496978 has been marked as a duplicate of this bug. ***
Verified 5.9.0.2 - External auth - AD
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:0380