OpenShift LDAP Identity name base64 decoded is not unique
Issue
When a user successfully authenticates for the first time using LDAP OAuth, an identities.user.openshift.io and associated users.user.openshift.io resource are created.
The "Identity" objects contains a providerUserName field, which is the base64-encoded value of the name field on the associated user object.
Sometimes the providerUserName base64 value does not decode correctly using the base64 CLI tool. The output value is either a truncated version of the name value or the base64 -d command presents an error.
For example, this will cause users with username AB99991 and AB99992 to have the same value.
Will this cause collisions with naming, as the Identity for users with usernames AB99991 and AB99992 should not be the same.
Environment
- OpenShift Container Platform
- 4.X
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.