harbor warns about not getting groups excluded by ldap group base dn about harbor HOT 6 OPEN

I experienced the same behavior with Harbor v2.9.4-a6d707df and FreeIPA.

My LDAP filtering is following:

But I have lot of warnings in logs (entries are changed because of the security reasons), when I tried to login with user who is part or cn=harbor_admins,cn=groups,cn=accounts,dc=company,dc=local group:

Can not get the ldap group name with DN cn=devops,cn=groups,cn=accounts,dc=company,dc=local
Can not get the ldap group name with DN cn=project1_admins,cn=groups,cn=accounts,dc=company,dc=local
Can not get the ldap group name with DN cn=project2_users,cn=groups,cn=accounts,dc=company,dc=local

from harbor.

As far as i can tel, the issue is still not solved

from harbor.

Could you please try this allow all ldap groups below ou=groups,dc=company,dc=local and change the LDAP group filter option to filter out the unused groups

from harbor.

I changed LDAP Group Base DN to
ou=groups,dc=company,dc=local
and LDAP Group filter to cn=harbor_user
I'm still getting messages for all other groups, that it could not read

from harbor.

just a bump. issue still exists (at least on my installation)

from harbor.

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

from harbor.