{"action":"closed","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/13656","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/13656/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/13656/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/13656/events","html_url":"https://github.com/rancher/rancher/issues/13656","id":325605625,"node_id":"MDU6SXNzdWUzMjU2MDU2MjU=","number":13656,"title":"Add a search fitler field for user and group search in AD auth provider","user":{"login":"CalvinHartwell","id":1898323,"node_id":"MDQ6VXNlcjE4OTgzMjM=","avatar_url":"https://avatars3.githubusercontent.com/u/1898323?v=4","gravatar_id":"","url":"https://api.github.com/users/CalvinHartwell","html_url":"https://github.com/CalvinHartwell","followers_url":"https://api.github.com/users/CalvinHartwell/followers","following_url":"https://api.github.com/users/CalvinHartwell/following{/other_user}","gists_url":"https://api.github.com/users/CalvinHartwell/gists{/gist_id}","starred_url":"https://api.github.com/users/CalvinHartwell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CalvinHartwell/subscriptions","organizations_url":"https://api.github.com/users/CalvinHartwell/orgs","repos_url":"https://api.github.com/users/CalvinHartwell/repos","events_url":"https://api.github.com/users/CalvinHartwell/events{/privacy}","received_events_url":"https://api.github.com/users/CalvinHartwell/received_events","type":"User","site_admin":false},"labels":[{"id":824123057,"node_id":"MDU6TGFiZWw4MjQxMjMwNTc=","url":"https://api.github.com/repos/rancher/rancher/labels/area/authentication","name":"area/authentication","color":"fbca04","default":false},{"id":145695746,"node_id":"MDU6TGFiZWwxNDU2OTU3NDY=","url":"https://api.github.com/repos/rancher/rancher/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb","default":false},{"id":343948025,"node_id":"MDU6TGFiZWwzNDM5NDgwMjU=","url":"https://api.github.com/repos/rancher/rancher/labels/priority/1","name":"priority/1","color":"009800","default":false},{"id":189155298,"node_id":"MDU6TGFiZWwxODkxNTUyOTg=","url":"https://api.github.com/repos/rancher/rancher/labels/status/resolved","name":"status/resolved","color":"0052cc","default":false},{"id":203009589,"node_id":"MDU6TGFiZWwyMDMwMDk1ODk=","url":"https://api.github.com/repos/rancher/rancher/labels/status/to-test","name":"status/to-test","color":"66aa66","default":false},{"id":1045505165,"node_id":"MDU6TGFiZWwxMDQ1NTA1MTY1","url":"https://api.github.com/repos/rancher/rancher/labels/team/ca","name":"team/ca","color":"f9d0c4","default":false},{"id":659821934,"node_id":"MDU6TGFiZWw2NTk4MjE5MzQ=","url":"https://api.github.com/repos/rancher/rancher/labels/version/2.0","name":"version/2.0","color":"e99695","default":false}],"state":"closed","locked":false,"assignee":{"login":"sangeethah","id":4266958,"node_id":"MDQ6VXNlcjQyNjY5NTg=","avatar_url":"https://avatars0.githubusercontent.com/u/4266958?v=4","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false},"assignees":[{"login":"sangeethah","id":4266958,"node_id":"MDQ6VXNlcjQyNjY5NTg=","avatar_url":"https://avatars0.githubusercontent.com/u/4266958?v=4","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/rancher/rancher/milestones/121","html_url":"https://github.com/rancher/rancher/milestone/121","labels_url":"https://api.github.com/repos/rancher/rancher/milestones/121/labels","id":3213084,"node_id":"MDk6TWlsZXN0b25lMzIxMzA4NA==","number":121,"title":"v2.1","description":"","creator":{"login":"deniseschannon","id":11410997,"node_id":"MDQ6VXNlcjExNDEwOTk3","avatar_url":"https://avatars1.githubusercontent.com/u/11410997?v=4","gravatar_id":"","url":"https://api.github.com/users/deniseschannon","html_url":"https://github.com/deniseschannon","followers_url":"https://api.github.com/users/deniseschannon/followers","following_url":"https://api.github.com/users/deniseschannon/following{/other_user}","gists_url":"https://api.github.com/users/deniseschannon/gists{/gist_id}","starred_url":"https://api.github.com/users/deniseschannon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deniseschannon/subscriptions","organizations_url":"https://api.github.com/users/deniseschannon/orgs","repos_url":"https://api.github.com/users/deniseschannon/repos","events_url":"https://api.github.com/users/deniseschannon/events{/privacy}","received_events_url":"https://api.github.com/users/deniseschannon/received_events","type":"User","site_admin":false},"open_issues":32,"closed_issues":240,"state":"open","created_at":"2018-03-23T18:54:40Z","updated_at":"2018-09-20T20:36:55Z","due_on":"2018-10-05T07:00:00Z","closed_at":null},"comments":6,"created_at":"2018-05-23T08:42:41Z","updated_at":"2018-09-20T20:36:55Z","closed_at":"2018-09-20T20:36:55Z","author_association":"NONE","body":"**Rancher versions:**\r\nrancher/rancher: 2.0.0 GA/2.0.1\r\n\r\n**Infrastructure Stack versions:** Canonical Kubernetes (k8s 1.10 and etcdv3)\r\nkubernetes (if applicable): 1.10\r\n\r\n**Docker version: (`docker version`,`docker info` preferred)**\r\n```\r\nubuntu@unckc-prd-node1:~$ docker version\r\nClient:\r\n Version:      1.13.1\r\n API version:  1.26\r\n Go version:   go1.6.2\r\n Git commit:   092cba3\r\n Built:        Thu Nov  2 20:40:23 2017\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.13.1\r\n API version:  1.26 (minimum version 1.12)\r\n Go version:   go1.6.2\r\n Git commit:   092cba3\r\n Built:        Thu Nov  2 20:40:23 2017\r\n OS/Arch:      linux/amd64\r\n Experimental: false\r\n```\r\n\r\n**Operating system and kernel: (`cat /etc/os-release`, `uname -r` preferred)**\r\n\r\n**Type/provider of hosts: (VirtualBox/Bare-metal/AWS/GCE/DO)**\r\n\r\n**Setup details: (single node rancher vs. HA rancher, internal DB vs. external DB)**\r\nsingle node Rancher\r\n\r\n**Environment Template: (Cattle/Kubernetes/Swarm/Mesos)**\r\nKubernetes \r\n**Steps to Reproduce:**\r\nSetup AD in 2.0.0, but we cannot see all the groups, only a subset of about 30 groups (there should be a couple thousand). However, the authentication is working. \r\n\r\nUpgrade to 2.0.1 and it appears to be working, but after disable AD and try to make a change, we are thrown an error that the DN is wrong, even though it is the same as before, IE:\r\n\r\n```\r\nmatch of:\r\n\t'(&(objectCategory=group)(|(cn=BU*)(cn=PRJ*))'\r\n: LDAP Result Code 34 \"Invalid DN Syntax\": 0000208F: NameErr: DSID-031001F7, problem 2006 (BAD_NAME), data 8349, best match of:\r\n\t'(&(objectCategory=group)(|(cn=BU*)(cn=PRJ*))'\r\n```\r\n\r\nI cannot provide the full error as it is contains sensitive information. The customer has support subscriptions for Rancher 2.X and will be willing to work over a video share. \r\n\r\n**Results:**\r\n\r\nThe authentication is not working, we are given an error that the DN is wrong but the DN is actually correct. It seems that the recent changes in 2.0.1 release have broken this. \r\n\r\nOne thing we did not try, but it seems like it may work is: \r\n1) Deploy Rancher 2.0 GA and configure AD, test it works. \r\n2) Upgrade to Rancher 2.0.1 release and leave AD configuration as before, test it works. \r\n\r\nCheers,\r\n\r\n- Calvin "}}
{"actor":{"display_login":"sangeethah"}}