Avoid panic at login when external group has a nil alias (hashicorp#6230

)
criteo-forks · Oct 22, 2019 · 6d86c74 · 6d86c74
1 parent 0412e53
commit 6d86c74
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vault/identity_store_util.go b/vault/identity_store_util.go
@@ -1868,7 +1868,7 @@ func (i *IdentityStore) refreshExternalGroupMembershipsByEntityID(entityID strin
 
 		// If the external group is from a different mount, don't remove the
 		// entity ID from it.
-		if mountAccessor != "" && group.Alias.MountAccessor != mountAccessor {
+		if mountAccessor != "" && group.Alias != nil && group.Alias.MountAccessor != mountAccessor {
 			continue
 		}