IncandescentChrysalis

> LdapSecurityConfig: > > * verify `ActiveDirectoryLdapAuthenticationProvider` does populate authorities properly (most likely, it doesn't) > > * if it doesn't, copy-paste `ActiveDirectoryLdapAuthenticationProvider` and (re)implement a populator (unless [#4490](https://github.com/spring-projects/spring-security/issues/4490) is...

I tried with those. By domain, I suppose you meant the capitalised name of the AD notion, no the domain name used as combination of `DC` Here is what I...

Something is worth mentioning about the two supplemental headers you indicated to me: * `OAUTH2.LDAP.ACTIVEDIRECTORY` * `OAUTH2.LDAP.ACTIVEDIRECTORY.DOMAIN` Using them on our image compiled from `provectus/kafka-ui` `v0.6.2` breaks authentication. It is...

It might simply come down to the fact that the two environment variables you indicated to me are improperly configured on my end. I wrote earlier what I *thought* they...

@Haarolean I got a solution for you! Here is a test Docker Active Directory environment with Kafka UI in which to test authentication: [IncandescentChrysalis/KafkaUI-ActiveDirectory](https://github.com/IncandescentChrysalis/KafkaUI-ActiveDirectory) I can reproduce the problem with...

To be crystal clear, authentication works in `0.6.2` and is broken since `0.7.0`: I originally reported `0.7.1`, which is consequentially true, but omits part of the problem. I found [the...

I found out why my LDAP authentication was now failing. Up to `0.6.2`, the Spring LDAP user filters were loaded with: ```Java @Value("${spring.ldap.userFilter.searchBase:#{null}}") private String userFilterSearchBase; @Value("${spring.ldap.userFilter.searchFilter:#{null}}") private String userFilterSearchFilter;...

> not really, taking spring boot's [relaxed binding rules](https://github.com/spring-projects/spring-boot/wiki/Relaxed-Binding-2.0) into consideration, both variants are equal. We have [this](https://github.com/kafbat/kafka-ui/blob/main/documentation/compose/ui-ldap.yaml#L24) LDAP compose which works perfectly fine. I would kindly suggest to put...

> is that fixable or should I get an amd64 machine for this? Make sure to have a Docker environment matching your kernel/architecture.

I testes futher with `1.0.0`, since the behaviour seems to have broken with `0.6.2` (not documented), but consistent since `0.7.0`. This works indeed per the example you provided: ```Bash SPRING_LDAP_USER_FILTER_SEARCH_BASE...