Dear all,
we would like to use davical with samba4 AD as an authentication
backend. The ldap protocol reports group members with the member:
attribute and the full DN as its value, not the sAMAccountName only. I
found a number of posts related to this from the past:
http://davical-general.89287.n3.nabble.com/Davical-general-Patch-for-ActiveDirectory-group-synchronization-td4025346.html
http://davical-general.89287.n3.nabble.com/Davical-general-drivers-ldap-php-add-quot-filter-Users-by-Group-quot-and-improve-AD-support-td4026275.html
http://davical-general.89287.n3.nabble.com/Davical-general-AD-group-synchronisation-td2815385.html
Has any of these made it into a current release? Do other people have
experience? I tried this:
$c->authenticate_hook['call'] = 'LDAP_check';
$c->authenticate_hook['config'] = array(
'host' => 'ldap://XXXX',
'port' => '389',
'bindDN' => 'XXXX@XXXX',
'passDN' => 'XXXXX',
'baseDNUsers' => 'DC=XXX,DC=XXX,DC=XX',
'protocolVersion' => 3,
'optReferrals' => 0,
'filterUsers' => '(&(objectClass=person)(objectClass=user))',
'baseDNGroups' => 'DC=XXX,DC=XXX,DC=XX',
'filterGroups' => '(&(objectClass=posixGroup)(objectClass=group))',
'startTLS' => true,
'mapping_field' => array('username' => 'sAMAccountName',
'modified' => 'whenChanged',
'fullname' => 'description',
'user_no' => 'uidNumber',
'email' => 'mail'),
'group_mapping_field' => array('username' => 'sAMAccountName',
'updated' => 'whenChanged',
'fullname' => 'description' ,
'members' => 'member'),
'format_updated'=> array('Y' => array(0,4),
'm' => array(4,2),
'd' => array(6,2),
'H' => array(8,2),
'M' => array(10,2),
'S' => array(12,2)),
'scope' => 'subtree', ...
It gets the users just fine and creates davical principals with the same
name as the sAMAccountName. But when I try to sync the groups, it finds
members with their full DN, but then fails to associate this with the
corresponding davical principal, which is named after the sAMAccountName....
Thanks for any hints,
Christian
_______________________________________________
Davical-general mailing list
Davical-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/davical-general
we would like to use davical with samba4 AD as an authentication
backend. The ldap protocol reports group members with the member:
attribute and the full DN as its value, not the sAMAccountName only. I
found a number of posts related to this from the past:
http://davical-general.89287.n3.nabble.com/Davical-general-Patch-for-ActiveDirectory-group-synchronization-td4025346.html
http://davical-general.89287.n3.nabble.com/Davical-general-drivers-ldap-php-add-quot-filter-Users-by-Group-quot-and-improve-AD-support-td4026275.html
http://davical-general.89287.n3.nabble.com/Davical-general-AD-group-synchronisation-td2815385.html
Has any of these made it into a current release? Do other people have
experience? I tried this:
$c->authenticate_hook['call'] = 'LDAP_check';
$c->authenticate_hook['config'] = array(
'host' => 'ldap://XXXX',
'port' => '389',
'bindDN' => 'XXXX@XXXX',
'passDN' => 'XXXXX',
'baseDNUsers' => 'DC=XXX,DC=XXX,DC=XX',
'protocolVersion' => 3,
'optReferrals' => 0,
'filterUsers' => '(&(objectClass=person)(objectClass=user))',
'baseDNGroups' => 'DC=XXX,DC=XXX,DC=XX',
'filterGroups' => '(&(objectClass=posixGroup)(objectClass=group))',
'startTLS' => true,
'mapping_field' => array('username' => 'sAMAccountName',
'modified' => 'whenChanged',
'fullname' => 'description',
'user_no' => 'uidNumber',
'email' => 'mail'),
'group_mapping_field' => array('username' => 'sAMAccountName',
'updated' => 'whenChanged',
'fullname' => 'description' ,
'members' => 'member'),
'format_updated'=> array('Y' => array(0,4),
'm' => array(4,2),
'd' => array(6,2),
'H' => array(8,2),
'M' => array(10,2),
'S' => array(12,2)),
'scope' => 'subtree', ...
It gets the users just fine and creates davical principals with the same
name as the sAMAccountName. But when I try to sync the groups, it finds
members with their full DN, but then fails to associate this with the
corresponding davical principal, which is named after the sAMAccountName....
Thanks for any hints,
Christian
_______________________________________________
Davical-general mailing list
Davical-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/davical-general