obs-docu
obs-docu copied to clipboard
Clean OBS setup not checking `admin` group on LDAP server
Following the guide here: https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.administration.html
My interpretation of the documentation on this line:
ldap_obs_admin_group | Group name for OBS Admins | | if set, members of that group become OBS admin role
-- | -- | -- | --
Is that anybody in the said LDAP group should have an Admin role on OBS?
However, although my LDAP works for a standard user login, none of the users who are members of the admin group have ADMIN privilege on OBS.
Additionally, I did some debugging on my openldap server, and I do not see a request for the ADMIN group at any time.
Does the option "ldap_obs_admin_group: obs-adm" actually work?
Thanks, Colin.
There is no trace of this option in the source code. This is a case of wrong documentation.
@hennevogel Does this mean there is no means to describe the OBS users with admin privileges in LDAP? If so that is a fairly major hole in the LDAP support.
Can't say, I'm not too familiar with that part sorry.