[dev.icinga.com #12598] Support nested AD groups for Roles and not just login

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/12598

Created by TheFlyingCorpse on 2016-08-30 20:31:44 +00:00

Assignee: elippmann
Status: Resolved (closed on 2016-12-09 09:55:03 +00:00)
Target Version: 2.4.0
Last Update: 2016-12-09 09:55:03 +00:00 (in Redmine)

---

Support nested AD groups for Roles in IcingaWeb2.

Scenario:

User1 is member of GroupA.
User2 is a member of GroupB.
GroupA is a member of GroupB.
GroupB is in the Role Administrators in IcingaWeb2.

When User1 logs in, he gets a message that he has no available dashlets, even when there is a filter to only allow members based on a "filter" for members of a group. This is because IcingaWeb2 doesnt lookup the users memberships with the required filter.
Meanwhile, User2 logs in and he doesnt see anything wrong with the config.

This ticket has a patch that resolves this behaviour in the form of a new checkbox that will add the required OID in the part of the code that looks up a users group memberships.

Attachments

• 0001-Add-support-for-Nested-AD-groups-resolved-from-the-u.patch TheFlyingCorpse - 2016-08-30 20:33:59 +00:00

Changesets

2016-12-07 16:15:59 +00:00 by TheFlyingCorpse 59f1a70

Add support for nested AD groups resolved from the user

This will make sure that nested groups also work with roles.

Signed-off-by: Alexander A. Klimov <alexander.klimov@icinga.com>

refs #12598

2016-12-07 16:45:50 +00:00 by (unknown) 648f088

Conform to coding guidelines

refs #12598

2016-12-07 17:06:32 +00:00 by (unknown) 01dd60c

Fix missing German translation

refs #12598

2016-12-09 09:15:43 +00:00 by elippmann bcc5b8c

Merge branch 'feature/support-nested-ad-groups-for-roles-12598'

resolves #12598

[icinga-migration]

Updated by TheFlyingCorpse on 2016-08-30 20:34:18 +00:00

• File added 0001-Add-support-for-Nested-AD-groups-resolved-from-the-u.patch

Attached.

[icinga-migration]

Updated by TheFlyingCorpse on 2016-08-30 21:12:13 +00:00

This refs #9612

[icinga-migration]

Updated by jmeyer on 2016-10-04 12:30:32 +00:00

• Target Version set to 2.4.0

Hi Rune,

thanks for providing a patch for this! We'll take a deeper a look at it soon and try to include it in the upcoming release.

Best,
Johannes

[icinga-migration]

Updated by zearan on 2016-10-05 05:27:09 +00:00

Tried that patch, works well for me. Thanks!

[icinga-migration]

Updated by aklimov on 2016-12-07 16:13:18 +00:00

• Status changed from New to Assigned
• Assigned to set to aklimov

[icinga-migration]

Updated by aklimov on 2016-12-07 17:07:29 +00:00

• Status changed from Assigned to Feedback
• Assigned to changed from aklimov to elippmann

[icinga-migration]

Updated by elippmann on 2016-12-09 09:55:03 +00:00

• Status changed from Feedback to Resolved
• Done % changed from 0 to 100

Applied in changeset bcc5b8c.