Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-38074

Unable to create/delete/edit Views from external LDAP user

    XMLWordPrintable

Details

    • Untriaged
    • Centos 64-bit
    • Yes

    Description

      Steps to Reproduce

      1. Create a Couchbase Server cluster with travel-sample sample bucket

      2. Configure cluster with LDAP, with the following CLI command:

      couchbase-cli setting-ldap -c 127.0.0.1:8091 -u Administrator -p --hosts ldap.forumsys.com --port 389 --encryption startTLS --server-cert-validation 0 --bind-dn cn=read-only-admin,dc=example,dc=com --bind-password password --user-dn-query "dc=example,dc=com??one?(uid=%u)" --authentication-enabled 1 --authorization-enabled 1 --group-query "dc=example,dc=com??one?(uniquemember=%D)"

      3. Add external user to cluster using LDAP configuration (username: gauss)

      4. Log in as external user 'gauss' (password:password)

      5. Add View with any 'Design Document Name' and 'View Name'

      Expected Results

      View will be added once the Save button is clicked.

      Actual Results

      View is not added. 'badarg' appears in red text above the 'Design Document Name' label in the Web Console. 

      This also applies to other operations such as deleting or updating a View, except nothing happens, and View is unchanged. 

      This also applies to deleting Views - nothing happens when the delete button is clicked. Also unable to edit Views.

      Logs show this error and stacktrace:

      [couchdb:error,2020-02-26T11:24:30.437Z,couchdb_ns_1@cb.local:<0.256.0>:couch_log:error:44]Uncaught error in HTTP request: {error,badarg}
      Stacktrace: <ud>[{ets,lookup,[roles_cache,{build_compiled_roles,{"gauss",external}}],[]},
           {active_cache,get_value,3,[{file,"src/active_cache.erl"},{line,74}]},
           {active_cache,get_value_and_touch,3,
                         [{file,"src/active_cache.erl"},{line,66}]},
           {menelaus_auth,check_permission,2,
                          [{file,"src/menelaus_auth.erl"},{line,446}]},
           {menelaus_auth,verify_rest_auth,2,
                          [{file,"src/menelaus_auth.erl"},{line,420}]},
           {capi_frontend,verify_bucket_auth,2,
                          [{file,"src/capi_frontend.erl"},{line,206}]},
           {capi_frontend,with_verify_bucket_auth,4,
                          [{file,"src/capi_frontend.erl"},{line,177}]},
           {request_throttler,do_request,3,
                              [{file,"src/request_throttler.erl"},{line,59}]}]</ud>
      

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            timofey.barmin Timofey Barmin
            callum.majumdar Callum Majumdar
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                PagerDuty