{"action":"closed","issue":{"url":"https://api.github.com/repos/unosquare/passcore/issues/182","repository_url":"https://api.github.com/repos/unosquare/passcore","labels_url":"https://api.github.com/repos/unosquare/passcore/issues/182/labels{/name}","comments_url":"https://api.github.com/repos/unosquare/passcore/issues/182/comments","events_url":"https://api.github.com/repos/unosquare/passcore/issues/182/events","html_url":"https://github.com/unosquare/passcore/issues/182","id":341910616,"node_id":"MDU6SXNzdWUzNDE5MTA2MTY=","number":182,"title":"CheckAllowedAdGroups not working","user":{"login":"Vafele","id":41332988,"node_id":"MDQ6VXNlcjQxMzMyOTg4","avatar_url":"https://avatars3.githubusercontent.com/u/41332988?v=4","gravatar_id":"","url":"https://api.github.com/users/Vafele","html_url":"https://github.com/Vafele","followers_url":"https://api.github.com/users/Vafele/followers","following_url":"https://api.github.com/users/Vafele/following{/other_user}","gists_url":"https://api.github.com/users/Vafele/gists{/gist_id}","starred_url":"https://api.github.com/users/Vafele/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vafele/subscriptions","organizations_url":"https://api.github.com/users/Vafele/orgs","repos_url":"https://api.github.com/users/Vafele/repos","events_url":"https://api.github.com/users/Vafele/events{/privacy}","received_events_url":"https://api.github.com/users/Vafele/received_events","type":"User","site_admin":false},"labels":[{"id":308354177,"node_id":"MDU6TGFiZWwzMDgzNTQxNzc=","url":"https://api.github.com/repos/unosquare/passcore/labels/help%20wanted","name":"help wanted","color":"159818","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":14,"created_at":"2018-07-17T13:04:52Z","updated_at":"2018-12-10T01:47:23Z","closed_at":"2018-12-10T01:47:23Z","author_association":"NONE","body":"Hi,\r\nWe tried testing CheckAllowedAdGroups parameter in our environment, but didn't manage to get it to work. \r\nFor example: \r\n\r\n\"CheckRestrictedAdGroups\": false,\r\n    \"RestrictedADGroups\": [\"Domain Users\"\r\n    ],\r\n    \"CheckAllowedAdGroups\": true,\r\n    \"AllowedADGroups\": [\r\n\"Domain Users\"\r\n]\r\n  },\r\n\r\nThis does not work for domain users - I'm still getting the \"You are not allowed to change your password\" message.\r\n\r\nOn the other hand, if I set both Restricted and Allowed parameters to false, everything works fine. Same when testing with just \"CheckRestrictedAdGroups\": true  - the restriction is correctly applied to the groups set in the parameter."}}
{"actor":{"display_login":"geoperez"}}