Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

ok, it should now be fixed in SVN. Attaching it so you can test it (and 
others might review it )
It's more a hack then a real solution. (I need to re-think about this)

you need to change the following in your config.inc.php file

$CONFIG['register']['default_group']='Domain Users';

$CONFIG['ldap']['uid']='sAMAccountName';
$CONFIG['ldap']['userfields'] = array ( 'samaccountname' => 'login', 
'name' => 'name', 'mail' => 'email', 'distinguishedname' => 'uid');

$CONFIG['ldap']['gid']='member';
$CONFIG['ldap']['groupfields'] = array ( 'samaccountname' => 'name', 
'name' => 'description' );

other settings might remain the same.

Alessandro

Alessandro Briosi ha scritto:
> ok there is defenatly something which has changed with SP2 or so. the AD 
> structure now looks pretty strange, and the problems are 2
> 1. searching the user fails
> 2. searching the groups also fails
> 
> I need to find a better way to handle this.
> 
> Alessandro
> 
> Alessandro Briosi ha scritto:
>> Andy Hester ha scritto:
>>> Alessandro Briosi wrote:
>>>> Well, it uses the AD user account to check for the group info, but I'm 
>>>> quite sure the specific 'login' field is not populated.
>>>>
>>>> Try changing the template file.
>>>> templates/index.tpl
>>>>
>>>> insert a new line after line 23 like this: (after {$user.name} ):
>>>> <br />{$user.login}
>>>>
>>>> and see if it prints something after the user name (once you log in).
>>>> If it does, then there is a bug somewhere, and I'll try AD again tomorrow.
>>>>   
>>> It does not print anything after making this change.  It would seem that 
>>> you are correct about the field not being populated, although I am not 
>>> sure why.
>>>
>>>> BTW: is this a 2003 , 2000 , mixed or 2008 AD?
>>>>   
>>> 2003.
>>>
>>>> (I have only tested a 2003 AD domain afair, and it worked with 'cn')
>>>>   
>>> If I use the 'cn' version, nothing happens after login (not even a 
>>> 'Login Incorrect' error, but it does error if I put something bogus into 
>>> the login). But the 'cn' and the sAMAccountName are the same value.
>>>
>>>
>> Maybe it's a rights issue of the "readonly" user. Can you try with an 
>> Administrator account as the "readonly" user to see if this fixes the 
>> problem?
>>
>>
>> That's my last guess for tonight. if this is not the case I'll check AD 
>> tomorrow.
>>
>> Alessandro
>>
>> ------------------------------------------------------------------------------
>> Register Now & Save for Velocity, the Web Performance & Operations 
>> Conference from O'Reilly Media. Velocity features a full day of 
>> expert-led, hands-on workshops and two days of sessions from industry 
>> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
>> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
>> _______________________________________________
>> Openupload-devel mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/openupload-devel
> 
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations 
> Conference from O'Reilly Media. Velocity features a full day of 
> expert-led, hands-on workshops and two days of sessions from industry 
> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel