starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

LDAP groups are not considered, when using API token #2077

New Issue
Closed
opened 2025-12-29 17:22:04 +01:00 by adam · 3 comments
adam commented 2025-12-29 17:22:04 +01:00
Owner
Copy Link

Originally created by @christianpinger on GitHub (Oct 30, 2018).

Netbox version: 2.4.6
Python version: 3.5.2

  • I have a netbox user, authenticated via LDAP.
  • The user has a ldap group cn=platform,ou=groups,dc=company,dc=com
  • I've created a group platform in Netbox Admin, which allows the user to create, modify, delete IP adresses and the same for api tokens
  • If the user uses the netbox gui, he can create, modify and delete IP adresses
  • If the user uses a self created the api token, he get an error: curl -X POST "https://netbox.company.com/api/ipam/ip-addresses/" -H "accept: application/json" -H "Content-Type: application/json" -H "Authorization: Token XXXXXXXXXXXX" -d "{ \"address\": \"10.12.16.1/24\"}" {"detail":"You do not have permission to perform this action."}
  • Here comes the interesting detail: If I manualy assign the group platform the the user, the api request is successful.

So my assumption is, if a user uses an API token, LDAP groups of this user are not mapped to netbox groups.

Originally created by @christianpinger on GitHub (Oct 30, 2018). Netbox version: 2.4.6 Python version: 3.5.2 * I have a netbox user, authenticated via LDAP. * The user has a ldap group `cn=platform,ou=groups,dc=company,dc=com` * I've created a group `platform` in Netbox Admin, which allows the user to create, modify, delete IP adresses and the same for api tokens * If the user uses the netbox gui, he can create, modify and delete IP adresses * If the user uses a self created the api token, he get an error: `curl -X POST "https://netbox.company.com/api/ipam/ip-addresses/" -H "accept: application/json" -H "Content-Type: application/json" -H "Authorization: Token XXXXXXXXXXXX" -d "{ \"address\": \"10.12.16.1/24\"}" {"detail":"You do not have permission to perform this action."}` * Here comes the interesting detail: If I manualy assign the group `platform` the the user, the api request is successful. So my assumption is, if a user uses an API token, LDAP groups of this user are not mapped to netbox groups.
adam added the status: acceptedtype: documentation labels 2025-12-29 17:22:04 +01:00
adam closed this issue 2025-12-29 17:22:04 +01:00
adam commented 2025-12-29 17:22:04 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Dec 4, 2018):

Does the suggestion posted in #1547 fix this?

AUTH_LDAP_MIRROR_GROUPS = True
@jeremystretch commented on GitHub (Dec 4, 2018): Does the suggestion posted in #1547 fix this? ``` AUTH_LDAP_MIRROR_GROUPS = True ```
adam commented 2025-12-29 17:22:05 +01:00
Author
Owner
Copy Link

@christianpinger commented on GitHub (Dec 5, 2018):

Yes, thank you. That is the solution

@christianpinger commented on GitHub (Dec 5, 2018): Yes, thank you. That is the solution
adam commented 2025-12-29 17:22:05 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Dec 5, 2018):

Reopening this as a documentation issue.

@jeremystretch commented on GitHub (Dec 5, 2018): Reopening this as a documentation issue.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label status: accepted type: documentation
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#2077
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?