Problem using LDAP directory service

Simone Roselli1

I'm trying to setup external LDAP directory service for stash. After setting up the ldap configuration page the test is not entirely successful:

Test basic connection: Succeeded

Test retrieve user: Succeeded

Test get user's memberhips with 0 groups retrieved. : Failed

Test retrieve group: Not performed

Test get group members.: Not performed

Test user can authenticate: Succeded

Looking in the LDAP log I see this query:

base=ou=Group,dc=develer,dc=com filter=(&(objectClass=posixGroup)(memberUid=uid=username,ou=people,dc=develer,dc=com))

With our LDAP directory structure this query will not work. How can I configure stash to use this query filter:

(&(objectClass=posixGroup)(memberUid=username))

i.e. the memberUid attribute contains only the username, without all the rest of the user DN.

(memberUid is the value specified in stash configuration: Membership schema settings/Group Members attribute)

Simone Roselli1

I discovered what was wrong: it's sufficient to select the right directory type in configuration: the right one for our ldap configuration is "OpenLDAP (read-only posix schema)". I thought it was only the read only version of "OpenLDAP" entry, instead these two configurations use different schemas for groups.