You need to configure the authentication to only use LDAP. You must have configured 2 services for authentication hence it fallbacks to DB. In RB documentation it is mentioned as to how to use only one mechanism of authentication.
Thanks, Subodh On Thu, 1 Sep 2022, 18:23 Vasiliki Stigka, <vasil...@mobee-tel.com> wrote: > Hello, > recently installed reviewboard version 4.0.6 and configured it through GUI > to use LDAP authentication. > > We have created into our ldap server specific group (name is 'mg_rbd') > for accessing the reviewboard. > So, the users who belong to that group ',g_rbd' will only have access > towards reviewboard. > > Inside reviewboard, through GUI again, we have configured the LDAP part so > as to filter the users who belong to the above group, like > this: (&(memberOf=cn=mg_rbd,ou=Access,ou=Groups,dc=mg,dc=cns)(cn=%s)) > > At the very first time the table "users" inside local database of > reviewboard is empty (only the admin user exists). > > We created a specific user which exists into our ldap server and belongs > to group 'mg_rbd'. > That user tries to login to reviewboard....SUCCESSFULLY! ---> this I > believe is correct..since the user is a member of the group 'mg_rbd' needs > to have access to reviewboard..and since inside reviewboard gui we have > configured the ldap part to filter the specific users...it lets the user to > login. > In parallel, the reviewboard stores into the table "users" on its db the > specific user. > > *BUT...if now we go and delete the specific user from the group 'mg_rbd' > inside our ldap server....and then try to login in the reviewboard, it will > do the following strange think:* > > *1. reviewboard will try to authenticate the user though ldap server---> > the authentication will fail...which is correct since the user was deleted > from group 'mg_rbd'2. reviewboard will search if the user exists on its > local db and it will find the user and let him in---->>>> ???? is this > valid??? I mean the user is supposed to be authenticated through > LDAP....since the authentication fails...why continues and searches the > user inside its local db???* > > BRs, > Vasiliki > > > -- > Supercharge your Review Board with Power Pack: > https://www.reviewboard.org/powerpack/ > Want us to host Review Board for you? Check out RBCommons: > https://rbcommons.com/ > Happy user? Let us know! https://www.reviewboard.org/users/ > --- > You received this message because you are subscribed to the Google Groups > "Review Board Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to reviewboard+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/reviewboard/799bf1aa-a622-4779-b995-36ab3cc0d5cfn%40googlegroups.com > <https://groups.google.com/d/msgid/reviewboard/799bf1aa-a622-4779-b995-36ab3cc0d5cfn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/ Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/ Happy user? Let us know! https://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "Review Board Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard/CAAECCoAAJJLf2dwWSw2BCS75gbmt3py8qtvhMzerp_bk8LOBUg%40mail.gmail.com.
