BUG: LDAP group filter not working

[atarkowska]

While setting up LDAP authentication limiting users to members of only one group it turned out that group filter is not taken to the account at all.

omero.ldap.urls=ldap://ldap.lifesci.dundee.ac.uk:389
omero.ldap.base=ou=lifesci,o=dundee
omero.ldap.config=True
omero.ldap.new_user_group=MY GROUP
omero.ldap.user_filter=(objectClass=inetorgperson)

Setting group filter to the following still let everyone log in:

omero.ldap.group_filter=(objectClass=groupOfNames)
omero.ldap.group_filter=(cn=omero-cls-gallery)
omero.ldap.group_filter=(&(objectClass=groupOfUniqueNames)(cn=omero-cls-gallery,ou=groups,ou=lifesci,o=dundee))

also

omero.ldap.group_filter=(objectClass=groupOfUniqueNames)
omero.ldap.group_mapping=name=cn
omero.ldap.new_user_group=:filtered_dn_attribute:uniqueMember

2014-01-07 11:41:02,000 INFO  [  ome.security.auth.LdapPasswordProvider] (l.Server-6) Default choice on create user: atarkowska (ome.conditions.ValidationException: No group found for: cn=atarkowska...o=dundee)
2014-01-07 11:41:02,001 WARN  [                     ome.logic.AdminImpl] (l.Server-6) Password provider returned null: ome.security.auth.PasswordProviders@4e50079b

LSC ldap has no group mapping in user entry thats why we are unable to filter that directly. But as tested 2 years ago ​ticket 6248 I am sure it was possible and working well.

[jamoore]

I won't be getting to this immediately, if anyone else can do some digging. It's also not an issue for the whole team, so changing CC.