Mapping AD groups to farcry groups

[Neil-12]

Hi All,

I'm working on upgrading from 4.19 to 5.2+ and I haven't been able to
find any place to map AD groups to farcry groups.

Originally I set up AD in version 4 using /config/
_dmSecUserDirectories.cfm and NTAdmin.dll. For version 5 I'm using the
farcryldap plugin which I had to hack up quite a bit to get it to work
in my active directory setup. The only problem I see right now is I'll
be stuck with the mappings that I created before the upgrade.

What's a good way to create new AD mappings in version 5?

Thanks,
Neil
--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: farcry-dev@...
To unsubscribe, email: farcry-dev+unsubscribe@...
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---

[Blair McKenzie-2]

To map roles to groups, edit the role. If the getAllGroups function in your custom user directory is working correctly, you will be able to select any number of default (FarCry) or external (AD) groups.

Blair

On Fri, Oct 16, 2009 at 1:37 AM, Neil <npeaslee@...> wrote:

Hi All,

I'm working on upgrading from 4.19 to 5.2+ and I haven't been able to
find any place to map AD groups to farcry groups.

Originally I set up AD in version 4 using /config/
_dmSecUserDirectories.cfm and NTAdmin.dll. For version 5 I'm using the
farcryldap plugin which I had to hack up quite a bit to get it to work
in my active directory setup. The only problem I see right now is I'll
be stuck with the mappings that I created before the upgrade.

What's a good way to create new AD mappings in version 5?

Thanks,
Neil

--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: farcry-dev@...
To unsubscribe, email: farcry-dev+unsubscribe@...
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---

[Neil-12]

Thanks Blair,

That did the trick. Getting the active directory queries set up was really the major hurdle. Apparently, the AD I live under is not standard so I had to customize LDAPUD.cfc extensively to get the functions to return the correct results.

I found a couple useful tools that really helped me out:

ldp.exe from microsoft. This is good for forming queries. http://support.microsoft.com/kb/224543

AD Explorer from microsoft. This is good for browsing the active directory. http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx

Neil

--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: farcry-dev@...
To unsubscribe, email: farcry-dev+unsubscribe@...
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---

[joel.cass]

Thanks for the links Neil, I've been looking for some useful AD tools
for ages. I didn't actually know M$ had freely released an AD browser.

Regarding AD setup, I think I am going to embark on this shortly. If
any future versions of the AD user directory are to be released in the
future, I would strongly recommend making the server details + user/
group queries editable via the settings section of the admin. This is
particularly useful in environments where the testing / live instances
have different paths to the server or are using different servers
completely. It also allows server admins to enter details in, taking
the load of developers to hard-code them into the application.

On Oct 20, 2:22 am, Neil Peaslee <npeas...@...> wrote:

> Thanks Blair,
> That did the trick. Getting the active directory queries set up was really
> the major hurdle. Apparently, the AD I live under is not standard so I had
> to customize LDAPUD.cfc extensively to get the functions to return the
> correct results.
>
> I found a couple useful tools that really helped me out:
> ldp.exe from microsoft. This is good for forming queries.http://support.microsoft.com/kb/224543
>
> AD Explorer from microsoft. This is good for browsing the active directory.http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx
>
> Neil

--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: farcry-dev@...
To unsubscribe, email: farcry-dev+unsubscribe@...
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---

[AJ Mercer]

This is a config form in farcryLDAP

http://modius.svn.cvsdude.com/farcry/plugins/farcryldap/trunk/packages/forms/configLDAP.cfc

2009/10/20 joel.cass <joel.a.cass@...>

Thanks for the links Neil, I've been looking for some useful AD tools
for ages. I didn't actually know M$ had freely released an AD browser.

Regarding AD setup, I think I am going to embark on this shortly. If
any future versions of the AD user directory are to be released in the
future, I would strongly recommend making the server details + user/
group queries editable via the settings section of the admin. This is
particularly useful in environments where the testing / live instances
have different paths to the server or are using different servers
completely. It also allows server admins to enter details in, taking
the load of developers to hard-code them into the application.

On Oct 20, 2:22 am, Neil Peaslee <npeas...@...> wrote:
> Thanks Blair,
> That did the trick. Getting the active directory queries set up was really
> the major hurdle. Apparently, the AD I live under is not standard so I had
> to customize LDAPUD.cfc extensively to get the functions to return the
> correct results.
>
> I found a couple useful tools that really helped me out:
> ldp.exe from microsoft. This is good for forming queries.http://support.microsoft.com/kb/224543
>
> AD Explorer from microsoft. This is good for browsing the active directory.http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx
>
> Neil

--
AJ Mercer
Web Log: http://webonix.net

--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: farcry-dev@...
To unsubscribe, email: farcry-dev+unsubscribe@...
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---