starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

REMOTE_AUTH_DEFAULT_GROUPS not being applied for django_auth method #7980

New Issue
Closed
opened 2025-12-29 20:30:48 +01:00 by adam · 2 comments
adam commented 2025-12-29 20:30:48 +01:00
Owner
Copy Link

Originally created by @andyb2000 on GitHub (May 2, 2023).

NetBox version

v3.4.6

Python version

3.10

Steps to Reproduce

Create GROUP "staff-users" and setup permissions.

Add a remote_auth_backend (I'm using django auth for tacacs):

REMOTE_AUTH_BACKEND = 'django_auth_tacacs.django.TACACSPlusAuthenticationBackend'
REMOTE_AUTH_AUTO_CREATE_USER = True
REMOTE_AUTH_DEFAULT_GROUPS = ['staff-users']
REMOTE_AUTH_GROUP_SYNC_ENABLED = False

Check and ensure you can login using the remote auth, login using a user that doesn't exist in the netbox user database.

Expected Behavior

The user will be authenticated/logged in.
The user will be created as we have set "REMOTE_AUTH_AUTO_CREATE_USER", the users group should be assigned to "staff-users".

Observed Behavior

At the moment the user is created, but not assigned to the group, therefore they don't inherit the permissions.

Logging does not throw out any errors/failures to assign to groups (debug logging enabled)

May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=No previous configuration found in database; proceeding with default values
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Initialized configuration
May 2 10:31:27 srvr-b NetBox: level=DEBUG,logger=django_auth_tacacs.django,msg=Created TACACS+ user andy.brown
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.auth.login,msg=Login form validation was successful
May 2 10:31:27 srvr-bNetBox: level=INFO,logger=netbox.auth.login,msg=User andy.brown successfully authenticated
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.auth.login,msg=Redirecting user to /
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Cleared configuration
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=No previous configuration found in database; proceeding with default values
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Initialized configuration
May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Cleared configuration

Originally created by @andyb2000 on GitHub (May 2, 2023). ### NetBox version v3.4.6 ### Python version 3.10 ### Steps to Reproduce Create GROUP "staff-users" and setup permissions. Add a remote_auth_backend (I'm using django auth for tacacs): REMOTE_AUTH_BACKEND = 'django_auth_tacacs.django.TACACSPlusAuthenticationBackend' REMOTE_AUTH_AUTO_CREATE_USER = True REMOTE_AUTH_DEFAULT_GROUPS = ['staff-users'] REMOTE_AUTH_GROUP_SYNC_ENABLED = False Check and ensure you can login using the remote auth, login using a user that doesn't exist in the netbox user database. ### Expected Behavior The user will be authenticated/logged in. The user will be created as we have set "REMOTE_AUTH_AUTO_CREATE_USER", the users group should be assigned to "staff-users". ### Observed Behavior At the moment the user is created, but not assigned to the group, therefore they don't inherit the permissions. Logging does not throw out any errors/failures to assign to groups (debug logging enabled) May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=No previous configuration found in database; proceeding with default values May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Initialized configuration May 2 10:31:27 srvr-b NetBox: level=DEBUG,logger=django_auth_tacacs.django,msg=Created TACACS+ user andy.brown May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.auth.login,msg=Login form validation was successful May 2 10:31:27 srvr-bNetBox: level=INFO,logger=netbox.auth.login,msg=User andy.brown successfully authenticated May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.auth.login,msg=Redirecting user to / May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Cleared configuration May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=No previous configuration found in database; proceeding with default values May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Initialized configuration May 2 10:31:27 srvr-bNetBox: level=DEBUG,logger=netbox.config,msg=Cleared configuration
adam closed this issue 2025-12-29 20:30:48 +01:00
adam commented 2025-12-29 20:30:48 +01:00
Author
Owner
Copy Link

@stuntguy3000 commented on GitHub (May 9, 2023):

What's a good way to resolve this - add this module as a dependency and add an internal TACACS Auth Backend w/ Groups?

@stuntguy3000 commented on GitHub (May 9, 2023): What's a good way to resolve this - add this module as a dependency and add an internal TACACS Auth Backend w/ Groups?
adam commented 2025-12-29 20:30:48 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Sep 25, 2023):

TACACSPlusAuthenticationBackend is not a NetBox-specific authentication backend. NetBox's authentication configuration options pertain only to backends which inherit from our RemoteUserBackend class. You'll need to consult the django_auth_tacacs documentation for instructions on enabling default group assignment.

@jeremystretch commented on GitHub (Sep 25, 2023): TACACSPlusAuthenticationBackend is not a NetBox-specific authentication backend. NetBox's authentication configuration options pertain only to backends which inherit from our `RemoteUserBackend` class. You'll need to consult the `django_auth_tacacs` documentation for instructions on enabling default group assignment.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#7980
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?