[MRM-1876] LDAP Group Role Mappings

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.2.0
• Component/s: Users/Security
• Environment: Windows Server 2012, Archiva .war running on Tomcat 8.0.20, PostgreSQL 9.4 as a data store for the Apache Jackrabbit JCR.
• Assignee: Unassigned
• Reporter: Chris Harris
• Created: 03/Mar/15 03:14
• Updated: 10/Mar/19 16:27

Description

I set up LDAP security for Active Directory on a fresh Archiva installation on a new server. I'm able to see my groups listed in the LDAP/Roles Mapping tab of the Users Runtime Configuration section. I've mapped my AD group to the System Administrator role alongside the other default role listed, which is my AD group's name.

I'm able to log in as my AD user account, however I do not have the permissions of the System Administrator role. I can verify this fact by clicking on the Roles link and looking at the roles Parent Roles, Child Roles, and Permissions, which are all empty. I can also verify this fact by clicking on Manage, finding my user account, and looking at the Effective Roles, which are also empty.

Issue Links

• relates to: MRM-1873 archiva doesn't recognise ldap-group to ldap-users mapping