xperseguers / t3ext-ig_ldap_sso_auth

TYPO3 Extension ig_ldap_sso_auth. This extension provides LDAP and SSO support for TYPO3.
https://extensions.typo3.org/extension/ig_ldap_sso_auth
GNU General Public License v3.0
29 stars 71 forks source link

LDAP Import user -> filter not working #2

Closed airbenich closed 6 years ago

airbenich commented 6 years ago

TYPO3 Version: 8.7.9 Extension Version: 3.2.2

Hey there,

i have a problem while making an scheduled LDAP import with this extension. In the configuration of my LDAP i set the "Filter" to: (&(objectClass=person)(sAMAccountName={USERNAME}))

But when executing the import via the TYPO3 Scheduler this filter is ignored and all users will be imported. When i execute this filter on the in the extensions "Search Wizard" it works perfectly.

Is there something i forgot to configure or is this a bug?

Thank you and greetings, Vivian

airbenich commented 6 years ago

Someone out there? :)

xperseguers commented 6 years ago

Yes there is someone :) This is not clear. Your filter is doing virtually nothing, it shows LDAP objects of class person with "any" sAMAccountName. So effectively this shows any user.

When importing, the task is effectively replacing following markers with an asterisk:

What do you mean by "this filter is ignored"? Which user you import is not matching this filter? Sounds odd, as explained.

airbenich commented 6 years ago

Great :)

all our LDAP-Users are imported without any filtering. But in the configuration of this Extension i made the following settings:

screenshot-2018-2-26 sdh intranet typo3 cms 8 7 9

xperseguers commented 6 years ago

Please debug this line to understand why the filter does not seem to be taken into account: https://github.com/xperseguers/t3ext-ig_ldap_sso_auth/blob/master/Classes/Utility/UserImportUtility.php#L143

airbenich commented 6 years ago

Ok thank you! It looks like the error is in the group assingment at our Active Directory-Server. Sorry for the inconvenience! & thank you for your help!