Bug 2153529 - LDAP users getting removed from the user group section after successful WebUI login as user.
Summary: LDAP users getting removed from the user group section after successful WebUI...
Keywords:
Status: NEW
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: LDAP
Version: 6.11.4
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-12-14 17:28 UTC by Ashish Patil
Modified: 2023-07-20 18:46 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 7006861 0 None None None 2023-04-10 08:54:58 UTC

Description Ashish Patil 2022-12-14 17:28:02 UTC
Description of problem:

 1. LDAP user is the part of User Group with a custom role having view permission.

 2. Login to Satellite WebUI as an LDAP user shows the following error:
 
~~~
Permission denied
    You are not authorised to perform this action.
    Please request one of the required permissions listed below from a Satellite administrator:

view_hosts"
~~~
 
 3. After successful login from step 2, the user gets removed from the user section in the user group.
  
     Satellite WebUI -> Administer  -> User Group -> Edit any User Group -> under the 'User Group' tab we see 'Users' with 'All items' and 'Selected Items' sections.
   
     The user gets removed from the 'Selected Items' after login as an LDAP user.
 
 4. However, refreshing the 'External Group' creates a user as it is in the user group section.
 
     Satellite WebUI -> Administer  -> User Group -> Edit any User Group -> External Group > Refresh
	 
The issue gets resolved after assigning the same role manually to the user from:
   
     Satellite WebUI -> Administer  -> User -> Edit User -> Roles -> Select from 'All Items'

Version-Release number of selected component (if applicable):

 - NA

How reproducible:

 - Every time the LDAP user successfully login to the WebUI.

Steps to Reproduce:
  1.
  2.
  3.

Actual results:

 - The user gets removed from the user group after a successful login as an LDAP user. It gets added after performing a manual 'Refresh' from the External Group under the User Group.
 - The role assigned to the user group is not working as expected and showing an error.

Expected results:
 
 - The user should not be removed from the user group after a successful login as an LDAP user.
 - The role assigned to the user group should be working and should show pages as per the assigned role.

Additional info:

 - NA


Note You need to log in before you can comment on or make changes to this bug.