Search code examples
active-directoryldapsonarqubesonarqube-web

SonarQube and LDAP - Case sensitive logins


I am checking SonarQube 5.4 and the latest LDAP plugin 1.5.1. There are however a couple of issues.

First. My AD account is majcicam. If I log in with it, it is correctly shown in the users list. However if I login with MajcicaM (note capital letters) another additional user is added to the list:

enter image description here

As you can see from the attached image. For every login that I do make, seems it is treated as case sensitive and thinks of it as a different user.

Second thing. Once I assign a group to my user, on the next login those settings are gone. Seems that they are not persisted.

Am I doing something wrong? Is this a bug? Are my settings messed up?

Thanks

Mario


Solution

  • No bugs here, just some subtleties about LDAP Plugin configuration and behaviour. :)

    Case-insensitive login

    Set sonar.authenticator.downcase to true when delegating authentication to an LDAP/AD server which is case-insensitive.

    Group mapping behaviour

    When group mapping is configured (i.e. you manually configured ldap.group.* or you use the windows authentication mode with lightweight AD config), membership in LDAP/AD will override any membership locally configured in SonarQube. LDAP/AD becomes the one and only place to manage group membership (and the info is fetched each time the user logs in).