-
-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Closed
Labels
Description
Describe the bug
"Search full LDAP directory" doesn't actually work.
To Reproduce
Steps to reproduce the behavior:
Add "Search full LDAP directory" permission to a freshly created user/serviceaccount. Then run the query:
ldapsearch -x -H ldap://<outpost-ldap>:389 -D 'cn=ldapbind,ou=users,DC=ldap,DC=goauthentik,DC=io' -w 'xxx' -b 'OU=users,DC=ldap,DC=goauthentik,DC=io' '(objectClass=user)It only returns the binduser.
If I ran the same command after I gave superuser permission to the bind user, it just work and i get the whole directory of users.
Expected behavior
I should get the whole directory of user with this permission without superuser rights.
Version and Deployment (please complete the following information):
- authentik version: 2024.8.3
- Deployment: helm
Reactions are currently unavailable