Menu

Data collector for LDAP ldap user allowed_org_list

stefan
2020-05-19
6 days ago
  • stefan

    stefan - 2020-05-19

    Hello,

    setting up the ldap collector has been mostly painless and works fantastic.

    there is one thing i can't get to work though.

    for the person_fields we can link org_id to the company field.

    for the user_fields i have added the <allowed_org_list>company</allowed_org_list> field since i found i could add that because it was in the iTopUserLDAPCollector.json file
    i set update to 1 for allowed_org_list in the json

    to get the same effect as for the contact the synchro shows up changed but allowed organisations list doesn't get filled with any organization when running the collector.

    how can i get the allowed organization list filled for a user the same way as we can do for the itop contact?

     
  • Mathis

    Mathis - 2020-06-15

    Hello,
    I have almost the same problem as you.

    I did that in the params.distrib.xml which is in collectors.

     
  • Andrew Precht

    Andrew Precht - 2021-04-19

    Has anyone found the solution to this?

    Same problem here, the Allowed Organizations tab is empty when using the Data collector for LDAP

     
  • stefan

    stefan - 2021-04-20

    no idea if they changed anything to the ldap importer but i haven't had time to test anymore.

     
  • Andrew Precht

    Andrew Precht - 2021-04-20

    thanks, Stefan...

     
  • flenner Emmanuel

    Hello
    I did that in the params.distrib.xml which is in collectors.

    add the field below the user_defaults part:

    <allow_org_list>allow_org_id->name:nameofcompagny</allow_org_list>

    I tested it and it works .

     
  • Bruno

    Bruno - 6 days ago

    Hello for those still interested, i could achieve this by modifying "collectors/src/iTopUserLDAPCollector.class.inc.php" (Prepare function only) with something like this :

    $aValues['allowed_org_list'] = "allowed_org_id->name:".$this->aUserDefaults['allowed_org_list'].";userid->login:".$aPerson['samaccountname'][0];

    ... and skipping beforehand the initialisation of allowed_org_list as it is already done for profile_list:
    if ($sFieldCode == 'allowed_org_list') continue;

    with this in the user_defaults section of the params.local.xml :
    <allowed_org_list>MY_ORG</allowed_org_list>

    this mod adds one MY_ORG in the list but it is easy to add a list as it is done with profile_list

     

Log in to post a comment.