| Subject: | multiple uid attributes break roles. |
If a user has multiple uid=* attributes, subsequent role lookups result
in a " Store claimed to have a restorable user, but restoration failed.
Did you change the user's id_field?" error. even though the first
check_user_roles('role') succeeds. This happens even when the role
lookup doesn't involve uid:
use_roles: 1
role_basedn: 'ou=Sets,dc=example,dc=org'
role_filter:
(&(objectClass=groupOfUniqueNames)(uniqueMember=%s))
role_scope: one
role_field: cn
role_value: dn
role_search_options:
deref: always
role_search_as_user: 0
but the user_field is uid.
removing the multiple uids fixes the problem.