I've just updated from 1.21.3 to 1.22.0 and found that users got permission denied messages after logging in, for example because of missing "view_hosts" permissions. After logging in as admin I recognized that the groups didn't have any members anymore. So I added the members again, saved the change, reloaded the group again to verify (members where still there), logged out from admin and logged in as normal user -> No view_hosts permission. Logged back in as admin and saw that the group had no members again. How reproducible: always Steps to Reproduce: 1. Set up LDAP authentication with synchronization enabled 2. Create simple Satellite Usergroup with no external user group link 3. Add users from the LDAP auth source to the Usergroup 4. Log-in as any of the LDAP users aded to the Usergroup Actual results: LDAP users are no longer members of the Satellite Usergroup. Expected results: No change in the Usergroup memberships.
Created from redmine issue https://projects.theforeman.org/issues/27402
Upstream bug assigned to oezr
VERIFIED version tested: Satellite 6.6.0 snap 22 Was able to reproduce the issue with following steps: On satellite 6.5, 1. Create ldap auth 2. Login with ldap User in satellite and logout 3. create usergroup and assign ldap user to it 4. perform upgrade 5. After upgrade ldap user was not part of user group Tested with upgrade from 6.5 to 6.6 snap 22, ldap user user group membership not lost after upgrade.
Created attachment 1619479 [details] After upgrade - screenshot
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2019:3172