Skip to content

[OKD4.6+] LDAP idP works fine but shows User Name Strings only base64 encoded - Bug? #769

Description

@devzeronull

Hi,

with some OKD version change (I think OKD 4.5 to 4.6 or so) Names of Users provided through LDAP idP which were automatically created after initial authentication get created with Usernames as base64 encoded string:

grafik

We are sure that this was not like that in an pre 4.6 OKD Release and is also not in our 3.11 clusters...

Our idP configuration works fine ever since and has never changed from our sides:

spec:
  identityProviders:
  - ldap:
      attributes:
        email:
        - Email
        id:
        - dn
        name:
        - cn
        preferredUsername:
        - uid
      bindDN: uid=XXX,dc=XXX,dc=XX
      bindPassword:
        name: ldaps-secret
      ca:
        name: ldaps-ca
      insecure: false
      url: ldaps://XXX.XXX:636/dc=XXX,dc=XX?uid??(memberOf=cn=XXX,ou=XXX,dc=XXX,dc=XX)
    mappingMethod: claim
    name: ldaps
    type: LDAP

Do you have any clue how to have the names shown decoded?
This is really annoying, e.g. the base64 string appears in requester, creator fields and therefor also in logging and monitoring systems...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions