{"action":"created","issue":{"url":"https://api.github.com/repos/portainer/portainer/issues/2177","repository_url":"https://api.github.com/repos/portainer/portainer","labels_url":"https://api.github.com/repos/portainer/portainer/issues/2177/labels{/name}","comments_url":"https://api.github.com/repos/portainer/portainer/issues/2177/comments","events_url":"https://api.github.com/repos/portainer/portainer/issues/2177/events","html_url":"https://github.com/portainer/portainer/issues/2177","id":351581947,"node_id":"MDU6SXNzdWUzNTE1ODE5NDc=","number":2177,"title":"LDAP: Teams not synching","user":{"login":"lukaspj","id":2369614,"node_id":"MDQ6VXNlcjIzNjk2MTQ=","avatar_url":"https://avatars3.githubusercontent.com/u/2369614?v=4","gravatar_id":"","url":"https://api.github.com/users/lukaspj","html_url":"https://github.com/lukaspj","followers_url":"https://api.github.com/users/lukaspj/followers","following_url":"https://api.github.com/users/lukaspj/following{/other_user}","gists_url":"https://api.github.com/users/lukaspj/gists{/gist_id}","starred_url":"https://api.github.com/users/lukaspj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lukaspj/subscriptions","organizations_url":"https://api.github.com/users/lukaspj/orgs","repos_url":"https://api.github.com/users/lukaspj/repos","events_url":"https://api.github.com/users/lukaspj/events{/privacy}","received_events_url":"https://api.github.com/users/lukaspj/received_events","type":"User","site_admin":false},"labels":[{"id":503814328,"node_id":"MDU6TGFiZWw1MDM4MTQzMjg=","url":"https://api.github.com/repos/portainer/portainer/labels/area/authentication","name":"area/authentication","color":"fbca04","default":false},{"id":668197209,"node_id":"MDU6TGFiZWw2NjgxOTcyMDk=","url":"https://api.github.com/repos/portainer/portainer/labels/authentication/ldap","name":"authentication/ldap","color":"bfdadc","default":false},{"id":379305037,"node_id":"MDU6TGFiZWwzNzkzMDUwMzc=","url":"https://api.github.com/repos/portainer/portainer/labels/kind/bug","name":"kind/bug","color":"ee0701","default":false},{"id":806139229,"node_id":"MDU6TGFiZWw4MDYxMzkyMjk=","url":"https://api.github.com/repos/portainer/portainer/labels/status/need-confirmation","name":"status/need-confirmation","color":"f9d0c4","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-08-17T12:51:43Z","updated_at":"2018-08-23T07:10:59Z","closed_at":null,"author_association":"NONE","body":"When users log in using LDAP, they are not assigned the teams that matches their AD groups.\r\n\r\n<!--\r\nBriefly describe the problem you are having in a few paragraphs.\r\n-->\r\n\r\n**Steps to reproduce the issue:**\r\n\r\n1. Create a fresh install of Portainer\r\n2. Set up LDAP authentication\r\n3. Add a team with the same name as an AD group\r\n4. Login as a user belonging to the AD group.\r\n\r\nI set the following attributes on the LDAP settings:\r\n\r\n* LDAP Server\r\n* Reader DN\r\n* Password\r\n* All security: OFF\r\n* Automatic User provision: ON\r\n* User Base DN\r\n* Username attribute: sAMAccountName\r\n* Group Base DN\r\n* Group Membership Attribute: member\r\n\r\nI copy-pasted the DNs from LDAP Admin, so I'm pretty sure those values don't have typos.\r\nOne thing of note, the AD Group has _ and - in the name, which might cause some encoding issue?\r\nI don't see anything in Portainer's stdout.\r\n\r\nEdit: Group Name is USR_ADM_Dev-Environment\r\n\r\n**Technical details:**\r\n\r\n* Portainer version: 1.19.1\r\n* Platform (windows/linux): Linux\r\n* Browser: Chrome\r\n"},"comment":{"url":"https://api.github.com/repos/portainer/portainer/issues/comments/415315138","html_url":"https://github.com/portainer/portainer/issues/2177#issuecomment-415315138","issue_url":"https://api.github.com/repos/portainer/portainer/issues/2177","id":415315138,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNTMxNTEzOA==","user":{"login":"lukaspj","id":2369614,"node_id":"MDQ6VXNlcjIzNjk2MTQ=","avatar_url":"https://avatars3.githubusercontent.com/u/2369614?v=4","gravatar_id":"","url":"https://api.github.com/users/lukaspj","html_url":"https://github.com/lukaspj","followers_url":"https://api.github.com/users/lukaspj/followers","following_url":"https://api.github.com/users/lukaspj/following{/other_user}","gists_url":"https://api.github.com/users/lukaspj/gists{/gist_id}","starred_url":"https://api.github.com/users/lukaspj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lukaspj/subscriptions","organizations_url":"https://api.github.com/users/lukaspj/orgs","repos_url":"https://api.github.com/users/lukaspj/repos","events_url":"https://api.github.com/users/lukaspj/events{/privacy}","received_events_url":"https://api.github.com/users/lukaspj/received_events","type":"User","site_admin":false},"created_at":"2018-08-23T07:10:59Z","updated_at":"2018-08-23T07:10:59Z","author_association":"NONE","body":"Found the culprit!\r\n\r\nThe issue is that the CN on the form \"John Doe (JDOE)\" fails for some reason.\r\nLogging in with a user that has a CN on the form \"Jane Doe\" without the (username) at the end works fine.\r\n\r\nNow, to find the source of this discrepancy.."}}
{"actor":{"display_login":"lukaspj"}}