bugphpGroupWare - Bugs: bug #15916, Again trouble handling LDAP...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #15916: Again trouble handling LDAP account...

Submitter:  Marco Gaiarin <gaio>
Submitted:  Mon 27 Feb 2006 02:54:02 PM UTC
   
 
Category:  API - Admin Item Group:  0.9.16.010
Severity:  3 - Normal Priority:  5 - Normal
Status:  Wont Fix Privacy:  Public
Assigned to:  Caeies Open/Closed:  Open
Component Version:  SVN Operating System:  GNU/Linux - Debian
Reproducibility:  Every Time Planned Release:  None
Fixed Release: 

Wed 08 Mar 2006 05:24:14 PM UTC, comment #2: 

I'm only speaking about membership, not the full ACL.

Apart that it is not clear to me because simply group membership are taken from LDAP instead from ACL (i suspect hystorical reason, too code to change in too many places ;), i propose a very simple task:

At every user login into phpgw, all the group membership of the user are reset (delete from phpgw_acl where acl_appname='phpgw_group' and acl_account=1000) and reinserted using as source the LDAP membership data.

Clearly this is a brute-force approach, a beter approach would be to verify every membership and add/remove only the needed one.

Clearly this could be achived by a global/config switch, not enabled by default. ;)

AFAI've understood phpgw, this could not pose any problem at all to phpgw, or at least not pose any problem more hard that modifing membership in Administration page by hand.


In this way i will be able to do user management with every interface i like.
Hope now it is clear, and hope also that i've not missed too many ``details''... O;-)))


Marco Gaiarin <gaio>
Mon 06 Mar 2006 01:11:32 PM UTC, comment #1: 

Hi Marco,

Group membership are handled by ACL, and exported to LDAP.
This is only a way for external apps to get these infos. Of course if your tools broke them ... well that's not our fault ...

So using external tools to add people into groups is not an option for phpgw, since we depends on ACL (in SQL) and not LDAP. This could be added in future release of phpgw, but not in .16 I'm afraid.

Regards,

Caeies

Caeies <Caeies>
Group administrator
Mon 27 Feb 2006 02:54:02 PM UTC, original submission:  


Another little troublen handling accounts and group in LDAP.
I've tested it also in my new installation.

Now create my account using smbldap-tools, then i use a LDAP browser (GNOME GQ) to add PHPGW ObjectClass and data.

But in this way membership are not preseved, and i've to enter phpgw as administrator, edit user data and reset group membership.

This is a real pain, because:

+ this force me to use phpgw to handle membership
+ if for some reason i use some other tool to handle membership, it is easy to override/get lost this membership working on phpgw.

For me an ideal approach will be simply: at every login, ldap membership data have to be copied into phpgw_acl array as phpgw membership; to me this seems a simple and effective approach.

Marco Gaiarin <gaio>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 2 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-03-06 Caeies StatusNone Wont Fix
    Assigned toNone Caeies

Back to the top

Powered by Savane 3.14-79a4.
Corresponding source code