Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

hmm, I might think there is something with the "groups" and the 
"unregistered" group.

It seems the correct group is not associated to the user, or users that 
are "registered" users are also members of the "unregistered" group.
This should explain the problems you have.
AD support checks for every group associated to the user (if it can find 
it) and applies the rules on every group. Unless no group has access to 
some functionality it denies access to it.
AFAIR also nested groups are checked.
that's why probably having a "ou" with the openupload groups in there 
and bind to that "ou" for the groups would be best. Open Upload won't 
find other groups so only thoose are checked in the acl (though don't 
use nested groups then).

Please also check the "unregistered" group in the config.inc.php file, 
that should match some group in active directory so you can set rights 
for it.
...

ok.
Looking at the source the fact that you get the "Public Files" means 
that the user is not logged in, or that the AD login field is not 
correctly populated.
Are you sure that in the config.inc.php file the line with associated 
fields like this?:
$CONFIG['ldap']['userfields'] = array ( 'cn' => 'login', 'name' => 
'name', 'memberof' => 'group_id', 'mail' => 'email');

This behavier is caused by a missing 'login' value when a user logs in.

Alessandro

Andy Hester ha scritto:
> Alessandro Briosi wrote:
>> Andy Hester ha scritto:
>>   
>>> 3.  It seems that the 'logout/login' link is broken and always says 
>>> 'login' regardless of context.
>>>     
>> this is pretty odd, I guess I'll have to test AD too. I don't get that 
>> with openLDAP, so maybe it's some acl.
>>
>>   
>>
> Also,
> 
> It seems that when I moved to Active Directory I have a different 
> behavior for file listings.  When logging in as a user, I see a "Public 
> Files" link on the top of the page and not a "My Files" link like I am 
> used to.  Also, users can now see files uploaded by other users.  This 
> may be the result of some change that I made while fiddling with the 
> site as opposed to a bug or such.  For the moment I have just disabled 
> file listing for the users. 
> 
> -Andy
> 
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations 
> Conference from O'Reilly Media. Velocity features a full day of 
> expert-led, hands-on workshops and two days of sessions from industry 
> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel