smolnar82 commented on code in PR #1479:
URL: https://github.com/apache/knox/pull/1479#discussion_r4465003102
##########
.github/workflows/tests/test_knox_ldap_proxy_search_with_role_lookup.py:
##########
@@ -163,6 +169,11 @@ def test_list_all_roles_by_objectclass_presence(self) ->
None:
groups = self.rdn_values(self.search(PROXY_GROUPS_BASE,
"(objectClass=*)"))
self.assertEqual(ALL_ROLES, set(groups))
+ # ApacheDS hands the interceptors
(|(objectClass=groupOfNames)(objectClass=referral)), which
+ # the roles lookup does not take for a list search from an ancestor of
ou=groups. So the
+ # backend groups are translated instead and roles assigned only to users
(platform:deployer)
+ # are missing.
+ @unittest.skip("root-level role listing misses roles assigned only to
users")
Review Comment:
I filed KNOX-3546; feel free to comment on the JIRA. I added explanation in
the PR description here too.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
