Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-21158

Support Active Directory msds-memberOfTransitive nested group search

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Done
    • Resolution: Done
    • Affects Version/s: 7.1.0, 6.17.0
    • Fix Version/s: 6.18.0, 7.3.0
    • Component/s: LDAP
    • Labels:
      None

      Description

      Artifactory to support Active Directory group nested search with an Active Directory constructed attribute:

      https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adls/dcddfdd8-5c70-45b7-bc64-a714ed2ca621

      As per the link above, the single prerequisite is that the feature requires Windows Server 2012 R2 version and above.
      Nothing needs to be enabled from the AD/Windows Server side.

      • It appears the maximum number of groups that can be retrieved when using this search is 4500 - however, when a user has this number of groups he cannot even be able to do an (LDAP) login, even outside/unrelated to the Artifactory authentication.
      • This improves on the Group Membership Attribute search: member: 1.2.840.113556.1.4.1941: search, which can demonstrate slowness of calculating the nested group structure for complex LDAP trees

      To enable the feature:

      Use Dynamic Strategy under a group setting definition, and use the msds-memberOfTransitive value as the membership attribute.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              andreik Andrei Komarov (Inactive)
              Reporter:
              andreik Andrei Komarov (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Sync Status

                  Connection: RTFACT Sync
                  RTMID-21158 -
                  SYNCHRONIZED
                  • Last Sync Date: