LDAP Group Mapping Issue – groupMemberAttribute Hardcoded to member Instead of memberUid (v2.6.0)

Chariot MQTT Server
1

Hi Team,

I’m running Chariot MQTT v2.6.0 on bare metal (systemd service) and am trying to integrate it with our corporate LDAP to authenticate users and map admin roles based on LDAP groups.

Our current setup:

  • LDAP Server: XXX (POSIX-style groups)

  • User Search Base: XXXX

  • Group Search Base: XXXX

  • Group Attribute: memberUid

Problem:
Chariot MQTT’s debug logs show that when it searches for groups, it always uses:

(member=uid=username,cn=users,dc=xxx,dc=xxxx)

instead of:

(memberUid=username)

This results in Found User Groups: [] for all users, even though ldapsearch works fine.

Suspected Cause:
From logs, it appears groupMemberAttribute is hardcoded to member in v2.6.0 and cannot be overridden in configuration. This is causing the mismatch for POSIX-style groups that use memberUid instead.

Questions:

  1. Is there a way in v2.6.0 to change the groupMemberAttribute to memberUid via config?

  2. If not, is this supported in any later Chariot MQTT version?

Thanks for your help!

— Divyesh

2

Hi Divyesh,
We don’t currently support that. Can I have you open a ticket directly with Cirrus Link Support and send over your logs? Contact Support - Cirrus Link Solutions - Worldwide - United States
Thanks,
Segan