From d7ac6224903604c82c6ad64e97c6908e036ac4b4 Mon Sep 17 00:00:00 2001 From: Anders Bogsnes Date: Thu, 3 Aug 2023 19:57:16 +0200 Subject: [PATCH] Update security docs to reflect LDAP casing issues --- docs/security.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/security.rst b/docs/security.rst index c5ef982dc7..bd75bfad64 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -137,7 +137,8 @@ You can limit the LDAP search scope by configuring:: # only allow users with memberOf="cn=myTeam,ou=teams,dc=example,dc=com" AUTH_LDAP_SEARCH_FILTER = "(memberOf=cn=myTeam,ou=teams,dc=example,dc=com)" -You can give FlaskAppBuilder roles based on LDAP roles (note, this requires AUTH_LDAP_SEARCH to be set):: +You can give FlaskAppBuilder roles based on LDAP roles. (note, this requires AUTH_LDAP_SEARCH to be set) +While LDAP is not case-sensitive, FlaskAppBuilder is, so the cases need to match:: # a mapping from LDAP DN to a list of FAB roles AUTH_ROLES_MAPPING = {