Skip to content

Commit 8ebd392

Browse files
Docs(authentication): Mention the case sensitivity of authenticator_map definitions (ansible#649)
Docs solution for the linked issue resulting from case sensitivity of authenticator map group checking. AAP-33304
1 parent 13ff878 commit 8ebd392

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/apps/authentication/authentication.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -176,6 +176,10 @@ Doing this will cause your custom module to run in place of the default module i
176176

177177
In this function the user claims will be a dictionary defined by the authentication_maps. You need to update the users permissions in your application based on this.
178178

179+
When defining authenticator maps, you will need to be mindful of the case-sensitivity of the authenticator backend's output in order to get the expected output. For example,
180+
LDAPs authenticator plugin accepts input in a case-insensitive manner, but returns a user's group membership in a case sensitive manner
181+
(ie. cn=John Smith,dc=example,dc=org vs CN=John Smith,DC=example,DC=org); In most cases "cn=John Smith,dc=example,dc=org" would be considered a valid group name during user claims
182+
reconciliation, but this may depend on the specific LDAP implementation being used.
179183

180184
## Optional RBAC dependency
181185

0 commit comments

Comments
 (0)