Details
-
Bug
-
Resolution: Fixed
-
Major
-
7.6.0
-
Untriaged
-
0
-
Unknown
Description
If a user accesses the UI docs page with SAML authentication, a call memcached will be made with the "Impersonate User" frame extra, with the user specified as external.
If no other external auth is enabled (e.g. ldap, saslauthd), then external auth will not be enabled in memcached, as SAML auth is UI-only.
If memcached receives a call with an external user in the "Impersonate User" frame extra, while external auth is disabled, then it returns NOT_SUPPORTED, with error context "External authentication service not configured".
Since it is expected that SAML users may be impersonated in calls to memcached, these calls should be able to succeed.
For additional context, see this Slack thread.