-
Notifications
You must be signed in to change notification settings - Fork 897
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Don't convert user-type email to upn #19515
Don't convert user-type email to upn #19515
Conversation
@miq-bot add_label wip |
e4fa2a7
to
f40a8fc
Compare
@jvlcek You have a bad BZ link in the commit and in the OP comment here. |
f40a8fc
to
e46d92f
Compare
Thank you for pointing that out @Fryguy. It should be correct now. |
e46d92f
to
d3fa94b
Compare
Checked commits jvlcek/manageiq@d3fa94b~...8607fae with ruby 2.5.5, rubocop 0.69.0, haml-lint 0.20.0, and yamllint 1.10.0 app/models/miq_request_workflow.rb
|
@jvlcek The BZ link above is probably wrong and is unrelated to ManageIQ |
@chessbyte Thank you. I had fixed that once, not sure how my fix got reverted. |
@miq-bot remove_label wip |
I've tested end-to-end against OpenLdap and Active Directory. |
@gtanzillo Please review. |
@miq-bot assign @abellotti |
@hstastna FYI |
@abellotti This looks good to me. Do you want to give it a look before I merge? |
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1769517
Summary:
Fix user_type==
mail
support in MiqLdap#get_user_objectDetails:
The user_type is not always set, requiring MiqLdap#get_user_object to attempt to determine the user_type based on the format of the user_name
The provider VM provisioning screens in the UI provide for the ability to lookup a user by email address in the Idp. The MiqLdap client was erroneously converting the user_type to
User Principle Name
(UPN) when the username format matched string@stringThis PR addresses this issue by:
1 - Explicitly specifying the user-type of mail in MiqRequestWorkflow#retrieve_ldap, which is used by the UI when doing user lookup by email.
2 - Ensuring the user_type is not set to UPN when user_type is mail.