How to get group memberships to work?

collective / pas.plugins.ldap

Zope (and Plone) PAS Plugin providing users and groups from LDAP directory

http://pypi.python.org/pypi/pas.plugins.ldap

Other

13 stars 20 forks source link

How to get group memberships to work? #21

Closed CharString closed 7 years ago

CharString commented 7 years ago

I'm talking to an openldap server that has posixAccount and posixGroup objects. Both Users and Groups appear in Plone, but I'm having a hard time getting the memberships to work.

There are 2 ways a posixAccount can be member of a posixGroup:

the posixAccount can have a gidNumber attribute that corresponds to the gidNumber of a posixGroup
A posixGroup can have a memberUid attribute that can have a list that correspond to uid's of posixAccounts

How do I get this to work?

rnixx commented 7 years ago

Here is the test setup config for posix account and posix group support. https://github.com/bluedynamics/node.ext.ldap/blob/master/src/node/ext/ldap/testing/__init__.py#L564 There's also support for the memberOf overlay of openldap

rnixx commented 7 years ago

May you confirm or not whether you got it working please?

CharString commented 7 years ago

On 28 September 2016 18:35:24 CEST, Robert Niederreiter notifications@github.com wrote:

May you confirm or not whether you got it working please?

I don't know how to combine the information in the test with the admin interface. Or does it require a change in the product code?

CharString commented 7 years ago

1.5.1 solved this issue for me.