Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-62419

Memcached returns 'not_supported' for impersonated SAML users if no other external auth is enabled

    XMLWordPrintable

Details

    • Untriaged
    • 0
    • Unknown

    Description

      If a user accesses the UI docs page with SAML authentication, a call memcached will be made with the "Impersonate User" frame extra, with the user specified as external.

      If no other external auth is enabled (e.g. ldap, saslauthd), then external auth will not be enabled in memcached, as SAML auth is UI-only.

      If memcached receives a call with an external user in the "Impersonate User" frame extra, while external auth is disabled, then it returns NOT_SUPPORTED, with error context "External authentication service not configured".

      Since it is expected that SAML users may be impersonated in calls to memcached, these calls should be able to succeed.

      For additional context, see this Slack thread.

      Attachments

        For Gerrit Dashboard: MB-62419
        # Subject Branch Project Status CR V

        Activity

          People

            peter.searby Peter Searby
            peter.searby Peter Searby
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty