Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-32622

Upsert does not work with users in LDAP Group with admin role

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 6.5.0
    • 6.5.0
    • ns_server
    • Enterprise Edition 6.5.0 build 2036 ‧ IPv4
    • Untriaged
    • Centos 64-bit
    • No

    Description

      1. Configure CB Server with LDAP authentication
      2. Create a ldap group and add a user to the the group in ldap. 
      3. Add ldap group to CBServer. Create a bucket in CB Server
      4. Grant the ldap a 'admin' role

      Now connect via SDK and create a document, failed with 

      Traceback (most recent call last):

        File "test.py", line 9, in <module>

          cb.upsert('u:king_arthur6', {'name': 'Arthur', 'email': 'kingarthur@couchbase.com', 'interests': ['Holy Grail', 'African Swallows']})

        File "/Library/Python/2.7/site-packages/couchbase/bucket.py", line 406, in upsert

          replicate_to=replicate_to)

      couchbase.exceptions.LCB_0x54 (generated, catch: CouchbaseInputError): <Key=u'u:king_arthur6', RC=0x54[Not authorized for operation], Operational Error, Results=1, C Source=(src/multiresult.c,316), Context=Authorization failure: can't execute SET operation without the Upsert privilege, Ref=4f12397c-d33f-4017-2e14-a54970557256>

       

      • Note that the user has admin role from ldap group
      • Note that internal user with admin is able to upsert
        *

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              ritam.sharma Ritam Sharma
              ritam.sharma Ritam Sharma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty