This issue has been created
 
 
LDAP / cid:jira-generated-image-avatar-a47d5430-5b73-47d8-82dd-0cda94de49e8 LDAP-155 Open

Active Directory pagination system is not supported

 
View issue   ·   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-a093aad3-6cd5-421f-b81a-a99968f93553 slauriere created this issue on 17/Apr/25 13:45
 
Summary: Active Directory pagination system is not supported
Issue Type: cid:jira-generated-image-avatar-a47d5430-5b73-47d8-82dd-0cda94de49e8 Bug
Affects Versions: 9.15.7
Assignee: Unassigned
Components: Authenticator
Created: 17/Apr/25 13:45
Priority: cid:jira-generated-image-static-major-9c72095a-3fb1-44b1-91b6-01acb87a4bfe Major
Reporter: slauriere
Description:

Steps to reproduce

  • In Active Directory, create a group with more than 1500 members.
  • In the Active Directory extension administration, restrict access to the wiki to that group.
  • Log in to the wiki using an account that is a member of the group.

Actual behavior

The user is denied access to the wiki, although they are a member of the authorized group.

Remarks

  • With the same configuration, but using a group that contains only a few members, users are granted access as expected.
  • Adding member;range=0-1499 to the list of LDAP member fields does not allow any users within this initial range to access the wiki:
xwiki.authentication.ldap.group_memberfields=member;range=0-1499,uniqueMember,memberUid

Resources