Skip to main content

Security updates: eMudhra certificate incident and PHP2Shell: Sonatype is aware of the eMudhra certificate incident and the PHP2Shell vulnerabilities. We are updating our products to address the eMudhra issue and have confirmed that Sonatype products are not impacted by PHP2Shell. Read Sonatype's assessment and guidance

Troubleshooting service account token role options in Nexus Repository

Updated

Troubleshooting service account token role options in Nexus Repository

Reported in: Nexus Repository 3.97.2; other versions may also be affected.

Problem

When you create a service account token in the legacy Nexus Repository user interface, the Role list may include LDAP groups that are not mapped to Nexus Repository roles.

Symptoms

The Role list in the legacy service account token creation dialog displays LDAP groups in addition to the roles you expect to assign.

Possible causes

The legacy creation dialog may show a broader set of role options than the Nexus Repository preview user interface. This behavior has been reported for environments using LDAP.

Solution

  1. Open the Nexus One preview user interface. For an overview, see Nexus One user interface overview.
  2. Open the service account token creation workflow in the preview user interface.
  3. Choose an assignable Nexus Repository role and create the token.

The reported issue indicates that the preview user interface is not affected by this behavior. If the preview interface is unavailable or the expected roles are not listed, contact Sonatype Support for assistance.

This issue is tracked internally as NEXUS-56252.

If this issue is resolved in a future release, the Nexus Repository release notes will include a note about the resolution.