LDAP group-lookup fails with row containing null #456

New Issue

MrUnknownDE · 2026-04-05T16:33:41+02:00

MrUnknownDE commented

2026-04-05 16:33:41 +02:00

Originally created by @altf4arnold on 1/28/2026

NetBox Edition

NetBox Community

NetBox Version

v4.5.1

Python Version

3.13

Steps to Reproduce

Create user-groups in netbox with permissions attributed to them
Have a LDAP server that contains groupOfNames with your users in it under a lower ou
Create a ldap_config.py that contains these options

AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=groups,dc=example,dc=com",
                                    ldap.SCOPE_SUBTREE,
                                    "(objectClass=groupOfNames)")
AUTH_LDAP_GROUP_TYPE = GroupOfNamesType()

AUTH_LDAP_MIRROR_GROUPS = True
AUTH_LDAP_FIND_GROUP_PERMS = True

Log in with a user that matches one of the groups

Expected Behavior

As the group search returns multiple groups, some of them are matching the names of local groups on the netbox instance, I expect the user to be inherited those permissions

Observed Behavior

I get errors that say :

null value in column "name" of relation "users_group" violates not-null constraint
DETAIL:  Failing row contains (48, null, ). while authenticating altf4

Errors go away when removing AUTH_LDAP_MIRROR_GROUPS = True. But the groups don't match

Even in DEBUG=True, it seems to just miss a name to pass through from Django-LDAP (I have confirmed that the data is well received from the LDAP)

When debug mode is disabled, I get this on the web-page

<class 'django.db.utils.IntegrityError'>

null value in column "name" of relation "users_group" violates not-null constraint
DETAIL:  Failing row contains (60, null, ).

Python version: 3.13.5
NetBox version: 4.5.1
Plugins: None installed

*Originally created by @altf4arnold on 1/28/2026* ### NetBox Edition NetBox Community ### NetBox Version v4.5.1 ### Python Version 3.13 ### Steps to Reproduce 1. Create user-groups in netbox with permissions attributed to them 2. Have a LDAP server that contains groupOfNames with your users in it under a lower ou 3. Create a ldap_config.py that contains these options ``` AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=groups,dc=example,dc=com", ldap.SCOPE_SUBTREE, "(objectClass=groupOfNames)") AUTH_LDAP_GROUP_TYPE = GroupOfNamesType() AUTH_LDAP_MIRROR_GROUPS = True AUTH_LDAP_FIND_GROUP_PERMS = True ``` 4. Log in with a user that matches one of the groups ### Expected Behavior As the group search returns multiple groups, some of them are matching the names of local groups on the netbox instance, I expect the user to be inherited those permissions ### Observed Behavior I get errors that say : ``` null value in column "name" of relation "users_group" violates not-null constraint DETAIL: Failing row contains (48, null, ). while authenticating altf4 ``` Errors go away when removing `AUTH_LDAP_MIRROR_GROUPS = True`. But the groups don't match Even in DEBUG=True, it seems to just miss a name to pass through from Django-LDAP (I have confirmed that the data is well received from the LDAP) When debug mode is disabled, I get this on the web-page ``` <class 'django.db.utils.IntegrityError'> null value in column "name" of relation "users_group" violates not-null constraint DETAIL: Failing row contains (60, null, ). Python version: 3.13.5 NetBox version: 4.5.1 Plugins: None installed ```

Sign in to join this conversation.

Branches Tags

main

21455-sql-indexes-audit

21357-register-model-actions

feature

20924-plugin-ui-components

21766-improve-test-coverage-for-sortable-table-columns

21157-export-template-public-models

21025-pre-render-config-contexts

21364-swagger

feature-ip-prefix-link

20911-dropdown-3

fix_module_substitution

21160-filterset

20911-dropdown-2

20044-elevation-stuck-lightmode

7604-filter-modifiers-v3

20660-script-load

19724-graphql

14884-script

19720-macaddress-interface-generic-relation

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

No Label netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner status: needs owner type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/netbox#456