Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
9.15.7
-
None
-
Unknown
-
Description
Steps to reproduce
- In Active Directory, create a group with more than 1500 members.
- In the Active Directory extension administration, restrict access to the wiki to that group.
- Log in to the wiki using an account that is a member of the group.
Actual behavior
The user is denied access to the wiki, although they are a member of the authorized group.
Remarks
- With the same configuration, but using a group that contains only a few members, users are granted access as expected.
- Adding member;range=0-1499 to the list of LDAP member fields does not allow any users within this initial range to access the wiki:
xwiki.authentication.ldap.group_memberfields=member;range=0-1499,uniqueMember,memberUid
Resources
- Search Using Range Retrieval – Microsoft documentation.
Attachments
Issue Links
- is related to
-
LDAP-59 Active Directory groups with more than 1500 members don't properly synchronize with XWiki Groups
-
- Closed
-