Skip to content

"Search full LDAP directory" doesn't actually work #11548

@Banh-Canh

Description

@Banh-Canh

Describe the bug
"Search full LDAP directory" doesn't actually work.

To Reproduce
Steps to reproduce the behavior:

Add "Search full LDAP directory" permission to a freshly created user/serviceaccount. Then run the query:

ldapsearch -x -H ldap://<outpost-ldap>:389 -D 'cn=ldapbind,ou=users,DC=ldap,DC=goauthentik,DC=io'  -w 'xxx'  -b 'OU=users,DC=ldap,DC=goauthentik,DC=io' '(objectClass=user)

It only returns the binduser.
If I ran the same command after I gave superuser permission to the bind user, it just work and i get the whole directory of users.

Expected behavior
I should get the whole directory of user with this permission without superuser rights.

Version and Deployment (please complete the following information):

  • authentik version: 2024.8.3
  • Deployment: helm

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingbug/confirmedConfirmed bugs

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions