From 07523219d1f9981cb4b89fbf0efac8d5e6f523d8 Mon Sep 17 00:00:00 2001 From: amiga23 Date: Sat, 18 Mar 2023 00:07:40 +0100 Subject: [PATCH] docs(dex): Fix group search MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The userAttr needs to be the full DN, otherwise the search does not work: ``` ❯ ldapsearch -x -H ldap://localhost:3890 -D "cn=admin,ou=people,dc=example,dc=com" -b "ou=groups,dc=example,dc=com" -W "member=bob" Enter LDAP Password: # extended LDIF # # LDAPv3 # base with scope subtree # filter: member=bob # requesting: ALL # # search result search: 2 result: 53 Server is unwilling to perform text: Unsupported group filter: while parsing a user ID: Missing DN value # numResponses: 1 ``` --- example_configs/dex_config.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/example_configs/dex_config.yml b/example_configs/dex_config.yml index 0c566ec..93bbf9c 100644 --- a/example_configs/dex_config.yml +++ b/example_configs/dex_config.yml @@ -27,6 +27,6 @@ connectors: baseDN: ou=groups,dc=example,dc=com filter: "(objectClass=groupOfUniqueNames)" userMatchers: - - userAttr: uid + - userAttr: DN groupAttr: member - nameAttr: displayName + nameAttr: cn