-
Notifications
You must be signed in to change notification settings - Fork 13.5k
OpenLDAP Group SYNC error #17363
Description
Description:
Rocketchat throws an error when trying to sync LDAPGroups.
Steps to reproduce:
- Attempt to login (Get notification that password is wrong or user cannot found) / or user that still exists can login but do not have the expected role
Expected behavior:
Upon login the roles will be mapped to the User.
Actual behavior:
New users cannot login, but the User is created in rocketchat. Old Users still are able to log in, but nor role is mapped.
Server Setup Information:
- Version of Rocket.Chat Server: 3.1.1
- Operating System: Linux
- Deployment Method: docker
- Number of Running Instances: 1
- DB Replicaset Oplog: True
- NodeJS Version: v12.16.1
- MongoDB Version: v4.2.5
Additional context
User Group Filter: (&(objectclass=inetOrgPerson)(memberOf=cn=#{groupName},ou=Teams,ou=Groups,dc=tu-berlin,dc=de)(uid=#{username}))
LDAP Group BaseDN: dc=tu-berlin,dc=de
User Data Group Map: { "rocket-admin":"admin" }
Relevant logs:
Exception while invoking method 'login' TypeError: Cannot read property 'searchAllSync' of undefined at isUserInLDAPGroup (app/ldap/server/sync.js:35:22) at mapLdapGroupsToUserRoles (app/ldap/server/sync.js:255:7) at syncUserData (app/ldap/server/sync.js:347:20) at addLdapUser (app/ldap/server/sync.js:461:2) at MethodInvocation.<anonymous> (app/ldap/server/loginHandler.js:146:17) at packages/accounts-base/accounts_server.js:460:31 at tryLoginMethod (packages/accounts-base/accounts_server.js:1289:14) at AccountsServer._runLoginHandlers (packages/accounts-base/accounts_server.js:458:22) at AccountsServer.Accounts._runLoginHandlers (app/lib/server/lib/loginErrorMessageOverride.js:7:35) at MethodInvocation.methods.login (packages/accounts-base/accounts_server.js:518:31) at maybeAuditArgumentChecks (packages/ddp-server/livedata_server.js:1771:12) at packages/ddp-server/livedata_server.js:719:19 at Meteor.EnvironmentVariable.EVp.withValue (packages/meteor.js:1234:12) at packages/ddp-server/livedata_server.js:717:46 at Meteor.EnvironmentVariable.EVp.withValue (packages/meteor.js:1234:12) at packages/ddp-server/livedata_server.js:715:46 at new Promise (<anonymous>) at Session.method (packages/ddp-server/livedata_server.js:689:23) at packages/ddp-server/livedata_server.js:559:43