kvfi 6937f3d6b2 fix: include nested group members for recursive retrieve strategy ...

When an LDAP group mapper uses the LOAD_GROUPS_BY_MEMBER_ATTRIBUTE_RECURSIVELY
retrieve strategy, a user's group memberships - and therefore the role mappings
granted through those groups - are resolved transitively through nested groups.
Listing the members of a group, however, only returned its direct members, so a
user that belonged to a group solely through a nested sub group was invisible on
that group's members endpoint, even though it effectively belonged to it. This
left role evaluation and member listing inconsistent.

GroupLDAPStorageMapper.getGroupMembers now resolves members recursively when the
recursive strategy is selected: it walks the transitive closure of the group's
nested sub groups via the 'member' attribute and returns the de-duplicated union
of all their members, with pagination applied to the combined result.

Closes #26699

Signed-off-by: kvfi <khalid@ouafi.net>

2026-06-25 08:05:19 -03:00

..

ipatuura

Proposed import order (#43432)

2025-11-14 09:34:49 +01:00

kerberos

Use MIME decoder instead of the default one to replace deprecated Base64 class

2026-01-09 16:38:09 +01:00

ldap

fix: include nested group members for recursive retrieve strategy

2026-06-25 08:05:19 -03:00

sssd

Add dbus-java as a common dependency

2026-05-12 10:17:21 -03:00

pom.xml

Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)

2025-08-12 16:50:17 +02:00