Hello, recently installed reviewboard version 4.0.6 and configured it through GUI to use LDAP authentication.
We have created into our ldap server specific group (name is 'mg_rbd') for accessing the reviewboard. So, the users who belong to that group ',g_rbd' will only have access towards reviewboard. Inside reviewboard, through GUI again, we have configured the LDAP part so as to filter the users who belong to the above group, like this: (&(memberOf=cn=mg_rbd,ou=Access,ou=Groups,dc=mg,dc=cns)(cn=%s)) At the very first time the table "users" inside local database of reviewboard is empty (only the admin user exists). We created a specific user which exists into our ldap server and belongs to group 'mg_rbd'. That user tries to login to reviewboard....SUCCESSFULLY! ---> this I believe is correct..since the user is a member of the group 'mg_rbd' needs to have access to reviewboard..and since inside reviewboard gui we have configured the ldap part to filter the specific users...it lets the user to login. In parallel, the reviewboard stores into the table "users" on its db the specific user. *BUT...if now we go and delete the specific user from the group 'mg_rbd' inside our ldap server....and then try to login in the reviewboard, it will do the following strange think:* *1. reviewboard will try to authenticate the user though ldap server---> the authentication will fail...which is correct since the user was deleted from group 'mg_rbd'2. reviewboard will search if the user exists on its local db and it will find the user and let him in---->>>> ???? is this valid??? I mean the user is supposed to be authenticated through LDAP....since the authentication fails...why continues and searches the user inside its local db???* BRs, Vasiliki -- Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/ Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/ Happy user? Let us know! https://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "Review Board Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard/799bf1aa-a622-4779-b995-36ab3cc0d5cfn%40googlegroups.com.
