starred/cloudbeaver
1
0
Fork 0
mirror of https://github.com/dbeaver/cloudbeaver.git synced 2026-03-04 08:52:27 -05:00
Code Issues 420 Projects Packages Wiki Activity

LDAP integration improvements #731

New issue
Open
opened 2026-03-04 10:50:48 -05:00 by deekerman · 31 comments
deekerman commented 2026-03-04 10:50:48 -05:00
Owner
Copy link

Originally created by @jonsbun on GitHub (Jun 17, 2024).

Originally assigned to: @HocKu7 on GitHub.

Is your feature request related to a problem? Please describe.
CloudBeaver 24.1.0 finally got LDAP support. However, according feedback LDAP integration lack of main functionally to use it properly at this moment.

Describe the solution you'd like

  1. Missing configuration of the bind user (service account) to the LDAP server.
    In general, an LDAP query looks something like this: ldapsearch -x -D "<bind-user>" -w "<bind-password>" -b "<base-dn>" "<filter>" -H "<ldap-host>:<ldap-port>". From the current configuration looks like the bind user is not used at all.

  2. Missing configuration of the unique identifier for the user.
    Depending on the LDAP this attribute could be uid, sAMAccountName, mail, etc. At this moment no clue what is being used in CloudBeaver LDAP authentication.

  3. Impossible to map LDAP users with the CloudBeaver Teams.

Originally created by @jonsbun on GitHub (Jun 17, 2024). Originally assigned to: @HocKu7 on GitHub. **Is your feature request related to a problem? Please describe.** CloudBeaver 24.1.0 finally got LDAP support. However, according feedback LDAP integration lack of main functionally to use it properly at this moment. **Describe the solution you'd like** 1) Missing configuration of the bind user (service account) to the LDAP server. In general, an LDAP query looks something like this: `ldapsearch -x -D "<bind-user>" -w "<bind-password>" -b "<base-dn>" "<filter>" -H "<ldap-host>:<ldap-port>"`. From the current configuration looks like the bind user is not used at all. 2) Missing configuration of the unique identifier for the user. Depending on the LDAP this attribute could be uid, sAMAccountName, mail, etc. At this moment no clue what is being used in CloudBeaver LDAP authentication. 3) Impossible to map LDAP users with the CloudBeaver Teams.
deekerman commented 2026-03-04 10:51:02 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (Jun 20, 2024):

@jonsbun
Thank you for summarizing all the feedback!
We will make improvements in future releases.

@EvgeniaBzzz commented on GitHub (Jun 20, 2024): @jonsbun Thank you for summarizing all the feedback! We will make improvements in future releases.
deekerman commented 2026-03-04 10:51:06 -05:00
Author
Owner
Copy link

@brunobergamo commented on GitHub (Jul 3, 2024):

HI, The ldap that I have to connect, it is not necessary to set the userName with cn=.

In LdapAuthProvider, we have :

        String cn = "cn=" + userName;
        var principal = Stream.of(cn, unit, ldapSettings.getBaseDN())
            .filter(CommonUtils::isNotEmpty)
            .collect(Collectors.joining(","));
        environment.put(Context.SECURITY_PRINCIPAL, principal );

I do need to set Context.SECURITY_PRINCIPAL with my userName with @domain .
environment.put(Context.SECURITY_PRINCIPAL, userName );

Is this open issue handle this case ?

Best Regards

@brunobergamo commented on GitHub (Jul 3, 2024): HI, The ldap that I have to connect, it is not necessary to set the userName with `cn=`. In LdapAuthProvider, we have : ``` String cn = "cn=" + userName; var principal = Stream.of(cn, unit, ldapSettings.getBaseDN()) .filter(CommonUtils::isNotEmpty) .collect(Collectors.joining(",")); environment.put(Context.SECURITY_PRINCIPAL, principal ); ``` I do need to set Context.SECURITY_PRINCIPAL with my userName with @domain . ` environment.put(Context.SECURITY_PRINCIPAL, userName );` Is this open issue handle this case ? Best Regards
deekerman commented 2026-03-04 10:51:07 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (Sep 5, 2024):

In version 24.2.0 the first two points have been implemented.

New parameters added:
ldap-identifier-attr - User identifier attribute
ldap-bind-user - Bind User DN
ldap-bind-user-pwd - Bind User Password
ldap-filter - User Filter

Some extra information you can find in the LDAP Authentication article

@EvgeniaBzzz commented on GitHub (Sep 5, 2024): In version 24.2.0 the first two points have been implemented. New parameters added: `ldap-identifier-attr` - User identifier attribute `ldap-bind-user` - Bind User DN `ldap-bind-user-pwd` - Bind User Password `ldap-filter` - User Filter Some extra information you can find in the [LDAP Authentication](https://github.com/dbeaver/cloudbeaver/wiki/LDAP-Authentication) article
deekerman commented 2026-03-04 10:51:08 -05:00
Author
Owner
Copy link

@iegurbide commented on GitHub (Nov 14, 2024):

What exactly is the use of ldap-cn? It does not seem to be described anywhere.

In the LDAP Authentication article it is refered to as a unique identifier but no information on how it is used.

I have succesfully integrated Cloudbeaver with an Active Directory and am able to successfully log in but only by providing the full DN in the LDAP tab which is quite annoying.

  • Are we able to login in via another field such as SAMAccountName? This is a common use case in Active Directory and is what I supposed ldap-cn value was for but it does not seem to be working.

  • Should ldap-dn be appendended to the end of the dn provided in te ldap tag? This also doesn't seem to be the case.

@iegurbide commented on GitHub (Nov 14, 2024): What exactly is the use of ldap-cn? It does not seem to be described anywhere. In the [LDAP Authentication](https://github.com/dbeaver/cloudbeaver/wiki/LDAP-Authentication) article it is refered to as a unique identifier but no information on how it is used. I have succesfully integrated Cloudbeaver with an Active Directory and am able to successfully log in but only by providing the full DN in the LDAP tab which is quite annoying. - Are we able to login in via another field such as SAMAccountName? This is a common use case in Active Directory and is what I supposed ldap-cn value was for but it does not seem to be working. - Should ldap-dn be appendended to the end of the dn provided in te ldap tag? This also doesn't seem to be the case.
deekerman commented 2026-03-04 10:51:08 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (Nov 14, 2024):

@iegurbide
The right one parametr is ldap-identifier-attr, not ldap-cn
Sorry for the confusion 😞 We'll correct the article.
Please, try to set ldap-identifier-attr=SAMAccountName

@EvgeniaBzzz commented on GitHub (Nov 14, 2024): @iegurbide The right one parametr is `ldap-identifier-attr`, not `ldap-cn` Sorry for the confusion 😞 We'll correct the article. Please, try to set `ldap-identifier-attr=SAMAccountName`
deekerman commented 2026-03-04 10:51:09 -05:00
Author
Owner
Copy link

@rgl1234 commented on GitHub (Nov 15, 2024):

Also ldap-identifier-attr=SAMAccountName is not working correctly

see log:

javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100245, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=example1,OU=example2,DC=domain,DC=local'
]; remaining name 'sAMAccountName=xyz,OU=example1,OU=example2,DC=domain,DC=local'

As you can see sAMAccountName is available in "remaining name"...I think this is how cloudbeaver is searching for the user in LDAP-directory. But as DN of user is different, user cannot be found. DN in AD is:

'CN=Firstname Lastname,OU=example1,OU=example2,DC=domain,DC=local'

How can this be fixed?

@rgl1234 commented on GitHub (Nov 15, 2024): Also ldap-identifier-attr=SAMAccountName is not working correctly see log: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100245, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=example1,OU=example2,DC=domain,DC=local' ]; remaining name 'sAMAccountName=xyz,OU=example1,OU=example2,DC=domain,DC=local' As you can see sAMAccountName is available in "remaining name"...I think this is how cloudbeaver is searching for the user in LDAP-directory. But as DN of user is different, user cannot be found. DN in AD is: 'CN=Firstname Lastname,OU=example1,OU=example2,DC=domain,DC=local' How can this be fixed?
deekerman commented 2026-03-04 10:51:09 -05:00
Author
Owner
Copy link

@iegurbide commented on GitHub (Nov 18, 2024):

+1.

Seeing the same behaviour as @rgl1234 .

@iegurbide commented on GitHub (Nov 18, 2024): +1. Seeing the same behaviour as @rgl1234 .
deekerman commented 2026-03-04 10:51:10 -05:00
Author
Owner
Copy link

@kakawait commented on GitHub (Nov 18, 2024):

See https://github.com/dbeaver/cloudbeaver/issues/3076#issuecomment-2483275251

@kakawait commented on GitHub (Nov 18, 2024): See https://github.com/dbeaver/cloudbeaver/issues/3076#issuecomment-2483275251
deekerman commented 2026-03-04 10:51:11 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (Nov 18, 2024):

@rgl1234 @iegurbide @kakawait
Some improvements are needed for your case. We'll add it in one of the future releases.

@EvgeniaBzzz commented on GitHub (Nov 18, 2024): @rgl1234 @iegurbide @kakawait Some improvements are needed for your case. We'll add it in one of the future releases.
deekerman commented 2026-03-04 10:51:12 -05:00
Author
Owner
Copy link

@SimonSunxz commented on GitHub (Nov 19, 2024):

+1，Seeing the same behaviour as @iegurbide,I am using CE 24.2, i configured cn,ou,dc,dc,dc in "ldap-dn". Then on the login page I must enter the full dn to log in successfully, but actually I need to use a user account in AD . when i use user account system error "LDAP user access validation by filter failed: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028D, problem 2001 (NO_OBJECT), data 0",How can I solve this problem?

@SimonSunxz commented on GitHub (Nov 19, 2024): +1，Seeing the same behaviour as @iegurbide,I am using CE 24.2, i configured cn,ou,dc,dc,dc in "ldap-dn". Then on the login page I must enter the full dn to log in successfully, but actually I need to use a user account in AD . when i use user account system error "LDAP user access validation by filter failed: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028D, problem 2001 (NO_OBJECT), data 0",How can I solve this problem?
deekerman commented 2026-03-04 10:51:13 -05:00
Author
Owner
Copy link

@kakawait commented on GitHub (Nov 19, 2024):

+1，Seeing the same behaviour as @iegurbide,I am using CE 24.2, i configured cn,ou,dc,dc,dc in "ldap-dn". Then on the login page I must enter the full dn to log in successfully, but actually I need to use a user account in AD . when i use user account system error "LDAP user access validation by filter failed: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028D, problem 2001 (NO_OBJECT), data 0",How can I solve this problem?

See above https://github.com/dbeaver/cloudbeaver/issues/2715#issuecomment-2483569602

@kakawait commented on GitHub (Nov 19, 2024): > +1，Seeing the same behaviour as @iegurbide,I am using CE 24.2, i configured cn,ou,dc,dc,dc in "ldap-dn". Then on the login page I must enter the full dn to log in successfully, but actually I need to use a user account in AD . when i use user account system error "LDAP user access validation by filter failed: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028D, problem 2001 (NO_OBJECT), data 0",How can I solve this problem? See above https://github.com/dbeaver/cloudbeaver/issues/2715#issuecomment-2483569602
deekerman commented 2026-03-04 10:51:13 -05:00
Author
Owner
Copy link

@DenisSinelnikov commented on GitHub (Dec 26, 2024):

Hi @jonsbun,
I am working on your question and would like to clarify point number 3.
You want to map LDAP users with Сloudbeaver Teams, which way do you mean, mapping LDAP group entities or mapping an attribute with a group value?

@DenisSinelnikov commented on GitHub (Dec 26, 2024): Hi @jonsbun, I am working on your question and would like to clarify point number 3. You want to map LDAP users with Сloudbeaver Teams, which way do you mean, mapping LDAP group entities or mapping an attribute with a group value?
deekerman commented 2026-03-04 10:51:14 -05:00
Author
Owner
Copy link

@jonsbun commented on GitHub (Dec 27, 2024):

Hi @jonsbun, I am working on your question and would like to clarify point number 3. You want to map LDAP users with Сloudbeaver Teams, which way do you mean, mapping LDAP group entities or mapping an attribute with a group value?

Hi @DenisSinelnikov,

The idea is the same as mentioned here: https://github.com/dbeaver/cloudbeaver/wiki/Teams#integration-with-identity-providers

@jonsbun commented on GitHub (Dec 27, 2024): > Hi @jonsbun, I am working on your question and would like to clarify point number 3. You want to map LDAP users with Сloudbeaver Teams, which way do you mean, mapping LDAP group entities or mapping an attribute with a group value? Hi @DenisSinelnikov, The idea is the same as mentioned here: https://github.com/dbeaver/cloudbeaver/wiki/Teams#integration-with-identity-providers
deekerman commented 2026-03-04 10:51:15 -05:00
Author
Owner
Copy link

@LonwoLonwo commented on GitHub (Jan 6, 2025):

Hello

We added the ability to set an attribute to be used as the user's login. The new parameter is ldap-login.
The bind user (ldap-bind-user and ldap-bind-user-pwd) must also be configured to use the attribute.

Now, the parameters look like this:

        "parameters": {
          "ldap-host": "ldap.example.com",
          "ldap-port": "1389",
          "ldap-login": "sAMAccountName",
          "ldap-dn": "ou=users,dc=company,dc=com",
          "ldap-identifier-attr": "cn",
          "ldap-bind-user": "cn=serviceAcc,ou=serviceAccounts,dc=company,dc=com",
          "ldap-bind-user-pwd": "serviceAccPas",
          "ldap-filter": ""
        }

These changes are found in the latest release, 24.3.2 (06.01.25).

@LonwoLonwo commented on GitHub (Jan 6, 2025): Hello We added the ability to set an attribute to be used as the user's login. The new parameter is `ldap-login`. The bind user (`ldap-bind-user` and `ldap-bind-user-pwd`) must also be configured to use the attribute. Now, the parameters look like this: ``` "parameters": { "ldap-host": "ldap.example.com", "ldap-port": "1389", "ldap-login": "sAMAccountName", "ldap-dn": "ou=users,dc=company,dc=com", "ldap-identifier-attr": "cn", "ldap-bind-user": "cn=serviceAcc,ou=serviceAccounts,dc=company,dc=com", "ldap-bind-user-pwd": "serviceAccPas", "ldap-filter": "" } ``` These changes are found in the latest release, 24.3.2 (06.01.25).
deekerman commented 2026-03-04 10:51:15 -05:00
Author
Owner
Copy link

@SimonSunxz commented on GitHub (Jan 10, 2025):

"parameters": {
      "ldap-host": "ldap.example.com",
      "ldap-port": "1389",
      "ldap-login": "sAMAccountName",
      "ldap-dn": "ou=users,dc=company,dc=com",
      "ldap-identifier-attr": "cn",
      "ldap-bind-user": "cn=serviceAcc,ou=serviceAccounts,dc=company,dc=com",
      "ldap-bind-user-pwd": "serviceAccPas",
      "ldap-filter": ""
    }

In the latest version, after configuring it this way, I tried logging in with an account using sAMAccountName from LDAP, but it failed with "User authentication failed:
LDAP authentication failed: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09050E, comment: AcceptSecurityContext error, data 52e, v4f7c]". It seems that the login is still not working correctly.

@SimonSunxz commented on GitHub (Jan 10, 2025): "parameters": { "ldap-host": "ldap.example.com", "ldap-port": "1389", "ldap-login": "sAMAccountName", "ldap-dn": "ou=users,dc=company,dc=com", "ldap-identifier-attr": "cn", "ldap-bind-user": "cn=serviceAcc,ou=serviceAccounts,dc=company,dc=com", "ldap-bind-user-pwd": "serviceAccPas", "ldap-filter": "" } In the latest version, after configuring it this way, I tried logging in with an account using sAMAccountName from LDAP, but it failed with "User authentication failed: LDAP authentication failed: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09050E, comment: AcceptSecurityContext error, data 52e, v4f7c]". It seems that the login is still not working correctly.
deekerman commented 2026-03-04 10:51:16 -05:00
Author
Owner
Copy link

@rgl1234 commented on GitHub (Jan 10, 2025):

Hi
It works on my side. But please check: attributes are case sensitive!

@rgl1234 commented on GitHub (Jan 10, 2025): Hi It works on my side. But please check: attributes are case sensitive!
deekerman commented 2026-03-04 10:51:16 -05:00
Author
Owner
Copy link

@SimonSunxz commented on GitHub (Jan 10, 2025):

Thank you so much! It really turned out to be a case sensitivity issue in the configuration.it's OK now.

@SimonSunxz commented on GitHub (Jan 10, 2025): Thank you so much! It really turned out to be a case sensitivity issue in the configuration.it's OK now.
deekerman commented 2026-03-04 10:51:17 -05:00
Author
Owner
Copy link

@dariamarutkina commented on GitHub (Jan 20, 2025):

Hello @jonsbun !
In version 24.3.3 the third point has been implemented.
A new LDAP Group name field has been added. It is located in the Admin part, in the Teams. In this field, you can specify a group, both in LDAP and after the user's login, this user will be mapped to CloudBeaver team

@dariamarutkina commented on GitHub (Jan 20, 2025): Hello @jonsbun ! In version 24.3.3 the third point has been implemented. A new LDAP Group name field has been added. It is located in the Admin part, in the Teams. In this field, you can specify a group, both in LDAP and after the user's login, this user will be mapped to CloudBeaver team
deekerman commented 2026-03-04 10:51:18 -05:00
Author
Owner
Copy link

@iegurbide commented on GitHub (Jan 20, 2025):

Hi, will the group mapping feature also be available in the Community Edition by setting values in the cloudbeaver.runtime.conf?

@iegurbide commented on GitHub (Jan 20, 2025): Hi, will the group mapping feature also be available in the Community Edition by setting values in the cloudbeaver.runtime.conf?
deekerman commented 2026-03-04 10:51:18 -05:00
Author
Owner
Copy link

@dariamarutkina commented on GitHub (Jan 21, 2025):

Hello @iegurbide !
This field is available in the Community Edition in the UI only in the CloudBeaver team settings

@dariamarutkina commented on GitHub (Jan 21, 2025): Hello @iegurbide ! This field is available in the Community Edition in the UI only in the CloudBeaver team settings
deekerman commented 2026-03-04 10:51:19 -05:00
Author
Owner
Copy link

@iegurbide commented on GitHub (Feb 20, 2025):

Hi,

after some tests this seems to still not be clear.

How are groups retrieved and from what base in the LDAP? There seems to be no group related parameters to specify the configuration in .cloudbeaver.runtime.conf.

Is the memberOf attribute being used?

Furthermore, what is the group name? A DN corresponding to a group? The CN?

Documenting this would be appreciated.

@iegurbide commented on GitHub (Feb 20, 2025): Hi, after some tests this seems to still not be clear. How are groups retrieved and from what base in the LDAP? There seems to be no group related parameters to specify the configuration in .cloudbeaver.runtime.conf. Is the memberOf attribute being used? Furthermore, what is the group name? A DN corresponding to a group? The CN? Documenting this would be appreciated.
deekerman commented 2026-03-04 10:51:19 -05:00
Author
Owner
Copy link

@valentintraen commented on GitHub (Apr 10, 2025):

Hi,

I can't get the link between team and ldap group to work. I've tried everything, the mapping never seems to happen.

Do you have examples of functional mappings?

The user-dn displayed on my user details page is indeed correct.

I have the impression that the bind parameters are used for the connection (which works well) but not for retrieving the groups (my bind user is allowed to get groups, that has been validated with ldapsearch, grafana, hv vault, mysql and mongodb) :

10-04-2025 14:51:33.021 [qtp29838617-185] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogin [user: null, sessionId: a821d083-9614-4e2b-ac81-2d93c4594af4] [variables] provider: ldap configuration: ******** credentials: ******** linkUser: false forceSessionsLogout: false 10-04-2025 14:51:33.166 [qtp29838617-185] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C090BE3, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839] at java.naming/com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3300) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3206) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997) at java.naming/com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1876) at java.naming/com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1799) at java.naming/com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392) at java.naming/com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) at java.naming/com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:341) at java.naming/javax.naming.directory.InitialDirContext.search(InitialDirContext.java:346) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:447) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:420) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2352) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2204) at io.cloudbeaver.service.security.CBEmbeddedSecurityControllerPro.finishAuthentication(CBEmbeddedSecurityControllerPro.java:120) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1620) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:92) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:171) at jdk.proxy8/jdk.proxy8.$Proxy15.authLogin(Unknown Source) at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:39) at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438) at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397) at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335) at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57) at graphql.execution.Execution.executeOperation(Execution.java:180) at graphql.execution.Execution.execute(Execution.java:116) at graphql.GraphQL.execute(GraphQL.java:546) at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471) at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.executeAsync(GraphQL.java:418) at graphql.GraphQL.execute(GraphQL.java:359) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:262) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:203) at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:186) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736) at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614) at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547) at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819) at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436) at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464) at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717) at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060) at org.eclipse.jetty.server.Server.handle(Server.java:182) at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662) at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99) at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164) at java.base/java.lang.Thread.run(Thread.java:1583)

@valentintraen commented on GitHub (Apr 10, 2025): Hi, I can't get the link between team and ldap group to work. I've tried everything, the mapping never seems to happen. Do you have examples of functional mappings? The user-dn displayed on my user details page is indeed correct. I have the impression that the bind parameters are used for the connection (which works well) but not for retrieving the groups (my bind user is allowed to get groups, that has been validated with ldapsearch, grafana, hv vault, mysql and mongodb) : `10-04-2025 14:51:33.021 [qtp29838617-185] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogin [user: null, sessionId: a821d083-9614-4e2b-ac81-2d93c4594af4] [variables] provider: ldap configuration: ******** credentials: ******** linkUser: false forceSessionsLogout: false 10-04-2025 14:51:33.166 [qtp29838617-185] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C090BE3, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839] at java.naming/com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3300) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3206) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997) at java.naming/com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1876) at java.naming/com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1799) at java.naming/com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392) at java.naming/com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) at java.naming/com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:341) at java.naming/javax.naming.directory.InitialDirContext.search(InitialDirContext.java:346) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:447) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:420) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2352) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2204) at io.cloudbeaver.service.security.CBEmbeddedSecurityControllerPro.finishAuthentication(CBEmbeddedSecurityControllerPro.java:120) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1620) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:92) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:171) at jdk.proxy8/jdk.proxy8.$Proxy15.authLogin(Unknown Source) at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:39) at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438) at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397) at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335) at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57) at graphql.execution.Execution.executeOperation(Execution.java:180) at graphql.execution.Execution.execute(Execution.java:116) at graphql.GraphQL.execute(GraphQL.java:546) at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471) at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.executeAsync(GraphQL.java:418) at graphql.GraphQL.execute(GraphQL.java:359) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:262) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:203) at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:186) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736) at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614) at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547) at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819) at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436) at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464) at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717) at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060) at org.eclipse.jetty.server.Server.handle(Server.java:182) at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662) at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99) at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164) at java.base/java.lang.Thread.run(Thread.java:1583)`
deekerman commented 2026-03-04 10:51:20 -05:00
Author
Owner
Copy link

@HocKu7 commented on GitHub (Apr 15, 2025):

@valentintraen Hi, thank you for your report. We will investigate the issue and come back after

@HocKu7 commented on GitHub (Apr 15, 2025): @valentintraen Hi, thank you for your report. We will investigate the issue and come back after
deekerman commented 2026-03-04 10:51:20 -05:00
Author
Owner
Copy link

@LonwoLonwo commented on GitHub (May 21, 2025):

Hello @valentintraen
We have a fix for your case. You can find it in the last CloudBeaver release, 25.0.4.
Will wait for your feedback.

@LonwoLonwo commented on GitHub (May 21, 2025): Hello @valentintraen We have a fix for your case. You can find it in the last CloudBeaver release, 25.0.4. Will wait for your feedback.
deekerman commented 2026-03-04 10:51:21 -05:00
Author
Owner
Copy link

@LonwoLonwo commented on GitHub (May 21, 2025):

Hello @iegurbide

You can find all connected documentation here: https://github.com/dbeaver/cloudbeaver/wiki/LDAP-Authentication
If not all the answers are in this documentation, feel free to ask more questions. Your input will help us improve it.

@LonwoLonwo commented on GitHub (May 21, 2025): Hello @iegurbide You can find all connected documentation here: https://github.com/dbeaver/cloudbeaver/wiki/LDAP-Authentication If not all the answers are in this documentation, feel free to ask more questions. Your input will help us improve it.
deekerman commented 2026-03-04 10:51:21 -05:00
Author
Owner
Copy link

@valentintraen commented on GitHub (May 21, 2025):

Hello @valentintraen We have a fix for your case. You can find it in the last CloudBeaver release, 25.0.4. Will wait for your feedback.

Hi,
Same problem here.

This is the connection log :

21-05-2025 13:43:18.750 [qtp746757564-67] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes 21-05-2025 13:43:18.755 [qtp746757564-67] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found javax.naming.PartialResultException: Unprocessed Continuation Reference(s) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3023) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.getNextBatch(AbstractLdapNamingEnumeration.java:148) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:217) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:504) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignmentTeam(LdapAuthProvider.java:465) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:94) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2409) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2253) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1659) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.initiateAuthentication(WebServiceAuthImpl.java:171) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:74) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:171) at jdk.proxy7/jdk.proxy7.$Proxy12.authLogin(Unknown Source) at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:39) at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438) at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397) at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335) at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57) at graphql.execution.Execution.executeOperation(Execution.java:180) at graphql.execution.Execution.execute(Execution.java:116) at graphql.GraphQL.execute(GraphQL.java:546) at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471) at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.executeAsync(GraphQL.java:418) at graphql.GraphQL.execute(GraphQL.java:359) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:265) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:206) at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:189) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736) at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614) at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547) at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819) at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436) at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464) at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717) at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060) at org.eclipse.jetty.server.Server.handle(Server.java:182) at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662) at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99) at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164) at java.base/java.lang.Thread.run(Thread.java:1583)

Do you have examples of functional group mappings please ?

@valentintraen commented on GitHub (May 21, 2025): > Hello [@valentintraen](https://github.com/valentintraen) We have a fix for your case. You can find it in the last CloudBeaver release, 25.0.4. Will wait for your feedback. Hi, Same problem here. This is the connection log : `21-05-2025 13:43:18.750 [qtp746757564-67] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes 21-05-2025 13:43:18.755 [qtp746757564-67] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found javax.naming.PartialResultException: Unprocessed Continuation Reference(s) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3023) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.getNextBatch(AbstractLdapNamingEnumeration.java:148) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:217) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:504) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignmentTeam(LdapAuthProvider.java:465) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:94) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2409) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2253) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1659) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.initiateAuthentication(WebServiceAuthImpl.java:171) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:74) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:171) at jdk.proxy7/jdk.proxy7.$Proxy12.authLogin(Unknown Source) at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:39) at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438) at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397) at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335) at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57) at graphql.execution.Execution.executeOperation(Execution.java:180) at graphql.execution.Execution.execute(Execution.java:116) at graphql.GraphQL.execute(GraphQL.java:546) at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471) at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.executeAsync(GraphQL.java:418) at graphql.GraphQL.execute(GraphQL.java:359) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:265) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:206) at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:189) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736) at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614) at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547) at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819) at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436) at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464) at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717) at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060) at org.eclipse.jetty.server.Server.handle(Server.java:182) at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662) at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99) at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164) at java.base/java.lang.Thread.run(Thread.java:1583)` Do you have examples of functional group mappings please ?
deekerman commented 2026-03-04 10:51:22 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (May 28, 2025):

@valentintraen
E.g. for this group:
dn: cn=developers,ou=Groups,dc=example,dc=com
objectClass: groupOfNames
cn: developers
member: uid=user1,ou=People,dc=example,dc=com
member: uid=user2,ou=People,dc=example,dc=com

Set cn=developers to CB team (LDAP Group name parameter)

Users will be mapped after the first login

@EvgeniaBzzz commented on GitHub (May 28, 2025): @valentintraen E.g. for this group: dn: cn=developers,ou=Groups,dc=example,dc=com objectClass: groupOfNames cn: developers member: uid=user1,ou=People,dc=example,dc=com member: uid=user2,ou=People,dc=example,dc=com Set **cn=developers** to CB team (LDAP Group name parameter) Users will be mapped after the first login
deekerman commented 2026-03-04 10:51:23 -05:00
Author
Owner
Copy link

@valentintraen commented on GitHub (Jun 2, 2025):

I'm sorry but I really can't get it to work. With this configuration, I no longer have the error "ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found" :

"authConfigurations": [
          {
            "id": "ldap",
            "provider": "ldap",
            "displayName": "LDAP",
            "disabled": false,
            "iconURL": "",
            "description": "",
            "parameters": {
              "ldap-host": "[my_host]",
              "ldap-port": "389",
              "ldap-login": "sAMAccountName",
              "ldap-dn": "ou=Utilisateurs,dc=interne,dc=[my_domain],dc=com",
              "ldap-identifier-attr": "CN",
              "ldap-bind-user": "cn=[my_account],ou=services,dc=interne,dc=[my_domain],dc=com",
              "ldap-bind-user-pwd": "[my_password]",
              "ldap-filter": ""
            }
          }
        ]

Here is the log when I log in :

02-06-2025 13:50:36.123 [qtp224468764-75] DEBUG i.c.model.session.WebSession - Update session lifetime 1mcj3wynnbiuh18qc6uei9x98w0 for user valentin.traen
02-06-2025 13:50:37.464 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogout [user: valentin.traen, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.471 [qtp224468764-68] INFO  i.c.model.session.WebSession - Project created: [ID=g_GlobalConfiguration, Name=GlobalConfiguration, Type=GLOBAL, Creator=null]
02-06-2025 13:50:37.499 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.563 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > openSession [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.596 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.617 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > sessionPermissions [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.634 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProductInfo [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:37.644 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getAuthProviders [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:38.861 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogin [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb]
02-06-2025 13:50:38.869 [qtp224468764-84] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes
02-06-2025 13:50:38.882 [qtp224468764-84] DEBUG i.c.model.session.WebUserContext - refresh permissions valentin.traen 46fe6a57-bb91-4bad-9f20-6ce8959af7c1
02-06-2025 13:50:38.883 [qtp224468764-84] DEBUG i.c.model.session.WebUserContext - refresh permissions valentin.traen 46fe6a57-bb91-4bad-9f20-6ce8959af7c1
02-06-2025 13:50:38.888 [qtp224468764-84] INFO  i.c.model.session.WebSession - Project created: [ID=g_GlobalConfiguration, Name=GlobalConfiguration, Type=GLOBAL, Creator=null]
02-06-2025 13:50:38.918 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.030 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > openSession [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.076 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.089 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProductInfo [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.095 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > sessionPermissions [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.145 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getServerLicenseStatus [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.170 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProjectList [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.226 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.291 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.360 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.365 [qtp224468764-69] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.429 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.457 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]
02-06-2025 13:50:39.458 [qtp224468764-69] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1]

In the interface I have configured a team with cn=[my_ldap_group] in the "LDAP Group name" section but it does not contain any users.

@valentintraen commented on GitHub (Jun 2, 2025): I'm sorry but I really can't get it to work. With this configuration, I no longer have the error "ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found" : ``` "authConfigurations": [ { "id": "ldap", "provider": "ldap", "displayName": "LDAP", "disabled": false, "iconURL": "", "description": "", "parameters": { "ldap-host": "[my_host]", "ldap-port": "389", "ldap-login": "sAMAccountName", "ldap-dn": "ou=Utilisateurs,dc=interne,dc=[my_domain],dc=com", "ldap-identifier-attr": "CN", "ldap-bind-user": "cn=[my_account],ou=services,dc=interne,dc=[my_domain],dc=com", "ldap-bind-user-pwd": "[my_password]", "ldap-filter": "" } } ] ``` Here is the log when I log in : ``` 02-06-2025 13:50:36.123 [qtp224468764-75] DEBUG i.c.model.session.WebSession - Update session lifetime 1mcj3wynnbiuh18qc6uei9x98w0 for user valentin.traen 02-06-2025 13:50:37.464 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogout [user: valentin.traen, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.471 [qtp224468764-68] INFO i.c.model.session.WebSession - Project created: [ID=g_GlobalConfiguration, Name=GlobalConfiguration, Type=GLOBAL, Creator=null] 02-06-2025 13:50:37.499 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.563 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > openSession [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.596 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.617 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > sessionPermissions [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.634 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProductInfo [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:37.644 [qtp224468764-75] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getAuthProviders [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:38.861 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > authLogin [user: null, sessionId: 193c438d-1b78-47af-aa4d-d7c8e1b8fddb] 02-06-2025 13:50:38.869 [qtp224468764-84] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes 02-06-2025 13:50:38.882 [qtp224468764-84] DEBUG i.c.model.session.WebUserContext - refresh permissions valentin.traen 46fe6a57-bb91-4bad-9f20-6ce8959af7c1 02-06-2025 13:50:38.883 [qtp224468764-84] DEBUG i.c.model.session.WebUserContext - refresh permissions valentin.traen 46fe6a57-bb91-4bad-9f20-6ce8959af7c1 02-06-2025 13:50:38.888 [qtp224468764-84] INFO i.c.model.session.WebSession - Project created: [ID=g_GlobalConfiguration, Name=GlobalConfiguration, Type=GLOBAL, Creator=null] 02-06-2025 13:50:38.918 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.030 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > openSession [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.076 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getActiveUser [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.089 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProductInfo [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.095 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > sessionPermissions [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.145 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getServerLicenseStatus [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.170 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > getProjectList [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.226 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.291 [qtp224468764-68] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.360 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.365 [qtp224468764-69] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.429 [qtp224468764-64] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.457 [qtp224468764-84] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] 02-06-2025 13:50:39.458 [qtp224468764-69] DEBUG i.c.server.graphql.GraphQLEndpoint - API > navNodeChildren [user: valentin.traen, sessionId: 46fe6a57-bb91-4bad-9f20-6ce8959af7c1] ``` In the interface I have configured a team with cn=[my_ldap_group] in the "LDAP Group name" section but it does not contain any users.
deekerman commented 2026-03-04 10:51:23 -05:00
Author
Owner
Copy link

@valentintraen commented on GitHub (Jun 2, 2025):

I've found !
With my users in ou=Utilisateurs and my groups in CN=Users, (users and groups share the same ldap-dn), here is a functional configuration:

"authConfigurations": [
          {
            "id": "ldap",
            "provider": "ldap",
            "displayName": "LDAP",
            "disabled": false,
            "iconURL": "",
            "description": "",
            "parameters": {
              "ldap-host": "[my_host]",
              "ldap-port": "389",
              "ldap-login": "sAMAccountName",
              "ldap-dn": "dc=interne,dc=[my_domain],dc=com",
              "ldap-identifier-attr": "CN",
              "ldap-bind-user": "cn=[my_account],ou=services,dc=interne,dc=[my_domain],dc=com",
              "ldap-bind-user-pwd": "[my_password]",
              "ldap-filter": "(CN=*)"
            }
          }
        ]

and I must declare my ldap group like this in my team:

CN=[my_ldap_group],CN=Users

@valentintraen commented on GitHub (Jun 2, 2025): I've found ! With my users in ou=Utilisateurs and my groups in CN=Users, (users and groups share the same ldap-dn), here is a functional configuration: ``` "authConfigurations": [ { "id": "ldap", "provider": "ldap", "displayName": "LDAP", "disabled": false, "iconURL": "", "description": "", "parameters": { "ldap-host": "[my_host]", "ldap-port": "389", "ldap-login": "sAMAccountName", "ldap-dn": "dc=interne,dc=[my_domain],dc=com", "ldap-identifier-attr": "CN", "ldap-bind-user": "cn=[my_account],ou=services,dc=interne,dc=[my_domain],dc=com", "ldap-bind-user-pwd": "[my_password]", "ldap-filter": "(CN=*)" } } ] ``` and I must declare my ldap group like this in my team: `CN=[my_ldap_group],CN=Users`
deekerman commented 2026-03-04 10:51:24 -05:00
Author
Owner
Copy link

@nickramos94 commented on GitHub (Oct 17, 2025):

Hi everyone,

unfortunately I can't make the binding between Cloudbeaver and AD groups to work.

This is how I set up the LDAP integration:

"authConfigurations": [
{
"id": "ldap",
"provider": "ldap",
"displayName": "domain.com",
"disabled": false,
"iconURL": "",
"description": "",
"parameters": {
	"ldap-host": "ads.domain.com",
	"ldap-port": "636",
	"ldap-login": "sAMAccountName",
	"ldap-dn": "dc=domain,dc=it",
	"ldap-identifier-attr": "CN",
	"ldap-enable-ssl": true,
	"ldap-ssl-cert": "....",
	"ldap-bind-user": "cn=Utente ldapcloudbeaver_ro,ou=Ldap Users,ou=Users,ou=Central Systems,dc=domain,dc=com",
	"ldap-bind-user-pwd": "....",
	"ldap-filter": "(memberOf:1.2.840.113556.1.4.1941:=CN=cdb_access,OU=CloudBeaver,OU=Groups,OU=Central Systems,DC=domain,DC=it)"
}

So the ldap-filter parameter allows the access only to the users that are part of the cdb_access group.

What I'm trying to do is create a group in cloudbeaver called dba_oracle bound to the AD group cdb_dba_oracle which is a member of the cdb_access group.

I tried to do like @valentintraen did and declared the LDAP group name in Cloudbeaver's GUI as
cn=cdb_dba_oracle,cn=cbd_access

I even went as far as to provide the whole group's location
cn=cdb_dba_oracle,cn=cbd_access,OU=CloudBeaver,OU=Groups,OU=Central Systems,DC=domain,DC=com

But the outcome is always the same: my user gets logged into a generic workspace with no connections and the log claims that Cloudbeaver is unable to find the group.

17-10-2025 09:12:04.604 [qtp899068489-52] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes
17-10-2025 09:12:05.030 [qtp899068489-52] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found
javax.naming.PartialResultException: Unprocessed Continuation Reference(s)
	at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3023)
	at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997)
	at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.getNextBatch(AbstractLdapNamingEnumeration.java:148)
	at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:217)
	at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189)
	at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:550)
	at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignmentTeam(LdapAuthProvider.java:511)
	at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:102)
	at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2596)
	at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2430)
	at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1814)
	at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.initiateAuthentication(WebServiceAuthImpl.java:176)
	at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:77)
	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
	at java.base/java.lang.reflect.Method.invoke(Method.java:580)
	at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:196)
	at jdk.proxy8/jdk.proxy8.$Proxy14.authLogin(Unknown Source)
	at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:40)
	at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533)
	at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497)
	at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438)
	at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397)
	at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335)
	at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57)
	at graphql.execution.Execution.executeOperation(Execution.java:180)
	at graphql.execution.Execution.execute(Execution.java:116)
	at graphql.GraphQL.execute(GraphQL.java:546)
	at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476)
	at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187)
	at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341)
	at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471)
	at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429)
	at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187)
	at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341)
	at graphql.GraphQL.executeAsync(GraphQL.java:418)
	at graphql.GraphQL.execute(GraphQL.java:359)
	at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:262)
	at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:194)
	at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:177)
	at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653)
	at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723)
	at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736)
	at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614)
	at io.cloudbeaver.server.jetty.RequestHostFilter.doFilter(RequestHostFilter.java:96)
	at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205)
	at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586)
	at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195)
	at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205)
	at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586)
	at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547)
	at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819)
	at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436)
	at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464)
	at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717)
	at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060)
	at org.eclipse.jetty.server.Server.handle(Server.java:182)
	at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662)
	at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418)
	at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
	at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
	at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478)
	at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441)
	at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
	at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
	at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164)
	at java.base/java.lang.Thread.run(Thread.java:1583)
@nickramos94 commented on GitHub (Oct 17, 2025): Hi everyone, unfortunately I can't make the binding between Cloudbeaver and AD groups to work. This is how I set up the LDAP integration: ``` "authConfigurations": [ { "id": "ldap", "provider": "ldap", "displayName": "domain.com", "disabled": false, "iconURL": "", "description": "", "parameters": { "ldap-host": "ads.domain.com", "ldap-port": "636", "ldap-login": "sAMAccountName", "ldap-dn": "dc=domain,dc=it", "ldap-identifier-attr": "CN", "ldap-enable-ssl": true, "ldap-ssl-cert": "....", "ldap-bind-user": "cn=Utente ldapcloudbeaver_ro,ou=Ldap Users,ou=Users,ou=Central Systems,dc=domain,dc=com", "ldap-bind-user-pwd": "....", "ldap-filter": "(memberOf:1.2.840.113556.1.4.1941:=CN=cdb_access,OU=CloudBeaver,OU=Groups,OU=Central Systems,DC=domain,DC=it)" } ``` So the ldap-filter parameter allows the access only to the users that are part of the **cdb_access** group. What I'm trying to do is create a group in cloudbeaver called **dba_oracle** bound to the AD group **cdb_dba_oracle** which is a member of the **cdb_access** group. I tried to do like @valentintraen did and declared the LDAP group name in Cloudbeaver's GUI as `cn=cdb_dba_oracle,cn=cbd_access` I even went as far as to provide the whole group's location `cn=cdb_dba_oracle,cn=cbd_access,OU=CloudBeaver,OU=Groups,OU=Central Systems,DC=domain,DC=com` But the outcome is always the same: my user gets logged into a generic workspace with no connections and the log claims that Cloudbeaver is unable to find the group. ``` 17-10-2025 09:12:04.604 [qtp899068489-52] DEBUG i.c.s.ldap.auth.LdapAuthProvider - Can't extract 'null' from ldap attributes 17-10-2025 09:12:05.030 [qtp899068489-52] ERROR i.c.s.ldap.auth.LdapAuthProvider - Group not found javax.naming.PartialResultException: Unprocessed Continuation Reference(s) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3023) at java.naming/com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2997) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.getNextBatch(AbstractLdapNamingEnumeration.java:148) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:217) at java.naming/com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.getGroupForMember(LdapAuthProvider.java:550) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignmentTeam(LdapAuthProvider.java:511) at io.cloudbeaver.service.ldap.auth.LdapAuthProvider.detectAutoAssignments(LdapAuthProvider.java:102) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.getAutoAssignUserData(CBEmbeddedSecurityController.java:2596) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.finishAuthentication(CBEmbeddedSecurityController.java:2430) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1814) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.initiateAuthentication(WebServiceAuthImpl.java:176) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:77) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) at java.base/java.lang.reflect.Method.invoke(Method.java:580) at io.cloudbeaver.service.WebServiceBindingBase$ServiceInvocationHandler.invoke(WebServiceBindingBase.java:196) at jdk.proxy8/jdk.proxy8.$Proxy14.authLogin(Unknown Source) at io.cloudbeaver.service.auth.WebServiceBindingAuth.lambda$0(WebServiceBindingAuth.java:40) at graphql.execution.ExecutionStrategy.invokeDataFetcher(ExecutionStrategy.java:533) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:497) at graphql.execution.ExecutionStrategy.fetchField(ExecutionStrategy.java:438) at graphql.execution.ExecutionStrategy.resolveFieldWithInfo(ExecutionStrategy.java:397) at graphql.execution.ExecutionStrategy.getAsyncFieldValueInfo(ExecutionStrategy.java:335) at graphql.execution.AsyncExecutionStrategy.execute(AsyncExecutionStrategy.java:57) at graphql.execution.Execution.executeOperation(Execution.java:180) at graphql.execution.Execution.execute(Execution.java:116) at graphql.GraphQL.execute(GraphQL.java:546) at graphql.GraphQL.lambda$parseValidateAndExecute$13(GraphQL.java:476) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.parseValidateAndExecute(GraphQL.java:471) at graphql.GraphQL.lambda$executeAsync$9(GraphQL.java:429) at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1187) at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2341) at graphql.GraphQL.executeAsync(GraphQL.java:418) at graphql.GraphQL.execute(GraphQL.java:359) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeQuery(GraphQLEndpoint.java:262) at io.cloudbeaver.server.graphql.GraphQLEndpoint.executeSingleQuery(GraphQLEndpoint.java:194) at io.cloudbeaver.server.graphql.GraphQLEndpoint.doPost(GraphQLEndpoint.java:177) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:653) at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.eclipse.jetty.ee10.servlet.ServletHolder.handle(ServletHolder.java:736) at org.eclipse.jetty.ee10.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1614) at io.cloudbeaver.server.jetty.RequestHostFilter.doFilter(RequestHostFilter.java:96) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.websocket.servlet.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:195) at org.eclipse.jetty.ee10.servlet.FilterHolder.doFilter(FilterHolder.java:205) at org.eclipse.jetty.ee10.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1586) at org.eclipse.jetty.ee10.servlet.ServletHandler$MappedServlet.handle(ServletHandler.java:1547) at org.eclipse.jetty.ee10.servlet.ServletChannel.dispatch(ServletChannel.java:819) at org.eclipse.jetty.ee10.servlet.ServletChannel.handle(ServletChannel.java:436) at org.eclipse.jetty.ee10.servlet.ServletHandler.handle(ServletHandler.java:464) at org.eclipse.jetty.ee10.servlet.SessionHandler.handle(SessionHandler.java:717) at org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1060) at org.eclipse.jetty.server.Server.handle(Server.java:182) at org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:662) at org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:418) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99) at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:478) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:441) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293) at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:979) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1209) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1164) at java.base/java.lang.Thread.run(Thread.java:1583) ```
deekerman commented 2026-03-04 10:51:24 -05:00
Author
Owner
Copy link

@EvgeniaBzzz commented on GitHub (Dec 17, 2025):

Issue with mapping memberOf was fixed in 25.3.0. It should now work properly.

@EvgeniaBzzz commented on GitHub (Dec 17, 2025): Issue with mapping **memberOf** was fixed in 25.3.0. It should now work properly.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
devel
8433-cb-replace-material-ui-with-native-css-variables-and-tailwind-utilities
release_26_0_0
7566-cb-add-settings-functionality-to-the-new-tree
8307-cb-bump-npm-dependencies
8557-cb-npe-cannot-invoke-stringlength-because-ipstring-is-null
7565-cb-implement-dnd-functionality-in-the-new-tree
7023-cb-find-and-replace-new
8479-sql-file-cant-be-opened-with-opened-dbeaver
dbeaver/pro#8467-fix-npe-read-only
dbeaver/pro#8149-fix-audit-loging-ip
dbeaver/pro#7657-debounce-loading-state
dbeaver/pro#8149-fix-empty-ip-in-audit-logging
8504-deadlock-fix
dbeaver/pro#8355-navigator-hover-perf
hotfix/8441-dbvr-ssl-parameters-are-broke
8394-test-ssh-with-connection-fix
8441-dbvr-ssl-parameters-are-broken
8298-cb-script-variables-improvements
8223-warning-message
3815-ctrl-z-is-unstable-lib-523-version
dbeaver/pro#8190-mask-credentials
8279-cb-rename-ce-and-ee-products
8068-cb-ai-language-dropdown-improvement
dbeaver/pro#8423-patch-resolutions
dbeaver/pro#8372
dbeaver/pro#8444-fix-error-message
8462-session-npe
dbeaver/pro#8281-check-inner-database-password
dbeaver/pro#8413-fix-fr-locale
8065-lsp-front-end
dbeaver/pro#7844-cb-lsp-server
dbeaver/pro#8023-error-descriptions
8196-validate-project-connection-copy
dbeaver/pro#7628-fix-session-refresh-on-server-config-update
8283-restrict-get-gql-request
dbeaver/pro#8317-filter-all-status
dbeaver/pro#7511-origin-details-avoid-call
8305-cb-the-generated-custom-ssl-certificate-domain-is-not-displayed
8351-devlmode
dbeaver/pro#6761-network-mode-host-config
release_25_3_5
dbeaver/pro#8047-create-sql-dialog-for-result-set-frontend-3
dbeaver/pro#8325-fix-oracle-selects-generation
dbeaver/pro#8385-fix-oracle-selects-generation
dbeaver/pro#8047-resultset-sql-generation
dbeaver/pro#8197-connection-preferences-form
dbeaver/pro#8119-add-project-cli-commands
8142-remove-public-cloudbeaver-url
dbeaver/pro#8044-add-api-for-database-user-preference
6306-api-for-original-query
6998-cb-ability-to-clone-connections
4999-cb-5633-data-editor-icons-to-see-pk-details
release_25_3_4
dbeaver/pro#7897-user-connection-view
dbeaver/pro#7975-pk-info
dbeaver/pro#7383-pointer-box-sizes
dbeaver/pro#7458-issues-with-fetching
7023-cb-find-and-replace-functionality-in-the-data-editor
8064-match-features-from-license
8016-move-ai-classes
release_25_3_3
dbeaver/pro#7936-change-object-settings-table
dbeaver/pro#7881-fix-unauthorized-qm-session-creation
4917-save-project-info-in-one-place
dbeaver/pro#7857-ai-language
8051-cb-bug-data-formatting-only-time-columns-not-supported
dbeaver/dbeaver-devops#2370-mvnw
dbeaver/pro#5880-object-viewer-min-col-width
7953-cb-ability-to-pin-rows-in-the-data-editor
40069-auto-commit-config-redesign
39210-sybase-dialect
devops-2221-base-java-repo
dbeaver/pro#7618-lsp-server-api
7710-dbvr-cli-connection-management-command
7923-cb-ws-events-are-misconfigured
7850-marketplace-licenses
release_25_3_2
dbeaver/dbeaver-devops#1604-non-root-user-25-2
release_25_3_1
release_25_3_0
release_25_2_5
dbeaver/pro#5930-cb-resultset-ordering-policy
dbeaver/pro#5267/auth-providers-refactoring
dbeaver/pro#6364-add-option-to-set-default-view-for-project
release_25_2_4
dbeaver/pro#5476-task-scheduler-refactor
release_25_2_3
7128-remove-deprecated-api
release_25_2_0
release_25_2_1
release_25_2_2
4569-cb-3681-use-something-better-than-md5-hash-to-pass-local-user-passwords
dbeaver/dbeaver-devops#1604-non-root-user-without-user-in-image
dbeaver/pro#6976-logging-poc
6409-cb-find-a-new-library-for-charts
6090-cb-highlighting-of-the-selected-menu-item-and-the-hovered-one-should-be-different
dbeaver/pro#6324-cursor-sync
dbeaver/pro#5630-add-cache-for-queries
5188-add-replicas-to-sysinfo
dbeaver/pro#5574/fix/multi-query-vqb
dbeaver/pro#5802/feat/table-api
5664-cb-vscode-value-panel-support-text-format
CB-6291-build-local-script-do-not-clone-all-required-repos-for-successful-build
4288-core-fix-critical-cve-2022-0839-and-cve-2022-0839-in-liquibase-bundle
3944-model-data
4207-core-duplicate-cb-session-id-in-dc-side
chore/update-vite-assets-plugin
25.1.5
25.1.4
25.1.3
25.1.2
25.1.1
25.1.0
25.0.5
25.0.4
25.0.3
25.0.2
25.0.1
25.0.0
24.3.5
24.3.4
24.3.3
24.3.2
24.3.0
24.3.1
24.2.5
24.2.4
24.2.3
24.2.2
24.2.1
24.2.0
24.1.5
24.1.4
24.1.3
24.1.2
24.1.0
24.1.1
24.0.5
24.0.4
24.0.3
24.0.2
24.0.1
24.0.0
23.3.5
23.3.4
23.3.3
23.3.2
23.3.1
23.3.0
23.2.5
23.2.4
23.2.3
23.2.2
23.2.1
23.2.0
23.1.5
23.1.4
23.1.3
23.1.2
23.1.1
v23.1.0
v23_0_5
21.3.3
21.2.4
1.2.0
1.1.0
1.0.4
1.0.3
1.0.1b
1.0.2
1.0.1
1.0.0
Labels
Clear labels   
AS

   
can't reproduce

   
can't reproduce

   
deployment

   
development

   
documentation

   
duplicate

   
duplicate

   
ee

   
enhancement

   
external

   
new driver

   
performance

   
third party issue

   
wait for response

   
wait for review

   
wontfix

   
x:Oracle

   
x:cassandra

   
x:clickhouse

   
x:db2

   
x:duckdb

   
x:greenplum

   
x:h2

   
x:h2gis

   
x:hana

   
x:hive

   
x:intersystems

   
x:kyuubi

   
x:maria

   
x:mongo

   
x:mysql

   
x:postgresql

   
x:presto

   
x:sql server

   
x:sqlite

   
x:teradata

   
x:trino

   
xf:accessibility

   
xf:administration

   
xf:authentication

   
xf:aws

   
xf:commit-mode

   
xf:connection

   
xf:data editor

   
xf:datatransfer

   
xf:dba

   
xf:driver management

   
xf:erd

   
xf:filters

   
xf:i18n

   
xf:i18n

   
xf:installer

   
xf:json

   
xf:ldap

   
xf:local config

   
xf:log viewer

   
xf:metadata

   
xf:metadata editor

   
xf:navigator

   
xf:okta

   
xf:query manager

   
xf:resource manager

   
xf:scripts

   
xf:sql editor

   
xf:tasks

   
xf:ui/uix

   
xo: Firefox

   
xo:eclipse

   
xo:internet explorer

   
xo:macos

   
xp:major

   
xrn:internal
No labels
AS
can't reproduce
can't reproduce
deployment
development
documentation
duplicate
duplicate
ee
enhancement
external
new driver
performance
third party issue
wait for response
wait for review
wontfix
x:Oracle
x:cassandra
x:clickhouse
x:db2
x:duckdb
x:greenplum
x:h2
x:h2gis
x:hana
x:hive
x:intersystems
x:kyuubi
x:maria
x:mongo
x:mysql
x:postgresql
x:presto
x:sql server
x:sqlite
x:teradata
x:trino
xf:accessibility
xf:administration
xf:authentication
xf:aws
xf:commit-mode
xf:connection
xf:data editor
xf:datatransfer
xf:dba
xf:driver management
xf:erd
xf:filters
xf:i18n
xf:i18n
xf:installer
xf:json
xf:ldap
xf:local config
xf:log viewer
xf:metadata
xf:metadata editor
xf:navigator
xf:okta
xf:query manager
xf:resource manager
xf:scripts
xf:sql editor
xf:tasks
xf:ui/uix
xo: Firefox
xo:eclipse
xo:internet explorer
xo:macos
xp:major
xrn:internal
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/cloudbeaver#731
No description provided.