Ldap RBAC is not effect

[uglyliu]

I tried the method in this issue https://github.com/provectus/kafka-ui/discussions/3909?converting=1#discussioncomment-6088826，but it didn't work

My ldap configuration is as follows，I created 2 ou in openldap, namely groups and people

Then I create a Generic: Posix Group in ou=people, named pom

Then create a user under the pom group as rocky.liu

Finally, add rocky.liu to the mygroup group

My kafka UI config

kafka:
  clusters:
    -
      name: test_kafka_cluster01
      bootstrapServers: 10.164.2.164:9092
    -
      name: test_kafka_cluster02
      bootstrapServers: 10.164.2.164:9092
auth:
  type: LDAP
spring:
  ldap:
    urls: ldap://10.164.2.164:389
    base: "cn={0},ou=people,dc=example,dc=com"
    admin-user: "cn=admin,dc=example,dc=com"
    admin-password: "passwd"
    user-filter-search-base: "dc=example,dc=com"
    user-filter-search-filter: "(&(uid={0})(objectClass=inetOrgPerson))"
    group-filter-search-base: "ou=people,dc=example,dc=com" # required for RBAC
server:
    port: 80
logging:
    level:
      root: INFO
      com.provectus: INFO
      reactor.netty.http.server.AccessLog: INFO
management:
    endpoint:
      info:
        enabled: true
      health:
        enabled: true
    endpoints:
        web:
          exposure:
            include: "info,health"
rbac:
  roles:
    - name: "mygroup"
      clusters:
        - test_kafka_cluster02
        - test_kafka_cluster01
      subjects:
        - provider: ldap
          type: group
          value: "pom"
      permissions:
        - resource: clusterconfig
          actions: [ "view" ]
        - resource: topic
          value: ".*"
          actions:
            - VIEW
            - MESSAGES_READ

        - resource: consumer
          value: ".*"
          actions: [ view ]

        - resource: schema
          value: ".*"
          actions: [ view ]

        - resource: connect
          value: ".*"
          actions: [ view ]

Can log in, but no permissions，Please help, thank you very much

[waitspring]

I suggest change parameter user-filter-search-filter: "(&(uid={0})(objectClass=inetOrgPerson))" to user-filter-search-filter: "(cn={0})"