NRE if user has not roles

[dmitrydvm]

If user has not roles, exception throw here

IdentityServer4.LdapExtension/IdentityServer.LdapExtension/UserModel/OpenLdapAppUser.cs

Line 63 in 7447e52

var userRoles = user.getAttribute(OpenLdapAttributes.MemberOf.ToDescriptionString()).StringValues;

How can I get user roles from AD?

[Nordes]

Yes, it will throw. I tested with MS AD, and in most of my cases I had a default role assigned to the user. A try/catch should be done in that part in order to avoid such exception. I will mark this as a bug to be fixed. I will try to find when I have the time to fix it.

The same issue will happen in MS AD

IdentityServer4.LdapExtension/IdentityServer.LdapExtension/UserModel/ActiveDirectoryAppUser.cs

Line 67 in 7447e52

var userRoles = user.getAttribute(ActiveDirectoryLdapAttributes.MemberOf.ToDescriptionString()).StringValues;

[abhisheknaik07]

This is not yet fixed.