ldapReference usage question

[Patrick Turcotte-3]

Hi,

Already asked in the forum
(http://www.nuxeo.org/discussions/thread.jspa?threadID=3000&tstart=0)
but figured it may get more visibility here. Don't hesitate to tell me
if it is not the preferred practice.

Still configuring my Ldap for production usage. For my group creation
problem (with attributes with set values), I'll post a patch in jira soon.

I'm trying to achieve subGroups (group of group in fact). Looking at the
examples and the test configs, I realise I have to use ldapReference
and/or ldapReferenceTree, but I can't figure out how exactly to do it yet.

My nuxeo managed groups have objectClass "gosaGroupOfNames" with
attribute "member = uid=username,dc=example,dc=com" for members.
I can put our general group in there "member =
cn=personGroup,ou=Groups,dc=example,dc=com".

Unfortunatly, nuxeo can't see the members of those groups.

My internal groups have objectClass of "posixGroup" and the members are
identified with "memberUid = myUid".

Should I create another "directory" element to configure the lookup of
group members? Should I put a specific value in dynamicAttributeId of
ldapReference? Should I user ldapTreeReference?

To put things in context, our ldap is OpenLdap, managed with GOsa
(https://oss.gonicus.de/labs/gosa/) and is structured around posixGroup.

Thanks for any help in sorting this out.

Patrick Turcotte
Revolution Linux


_______________________________________________
ECM mailing list
ECM@...
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm

[Anahide Tchertchian-2]

Hi,
There is some documentation available here:
http://doc.nuxeo.org/5.1/books/nuxeo-book/html/chapter-directories.html#ldap-directories
But given what you're saying, it looks like you're in the good
direction. Maybe copying here your configuration that doesn't behave
as expected would help figuring out the problem.

Regards,

--
Anahide Tchertchian, Nuxeo
Mail: at@... - Tel: [phone]
http://www.nuxeo.com - http://www.nuxeo.org


2009/11/9 Patrick Turcotte <patrek@...>:

> Hi,
>
> Already asked in the forum
> (http://www.nuxeo.org/discussions/thread.jspa?threadID=3000&tstart=0)
> but figured it may get more visibility here. Don't hesitate to tell me
> if it is not the preferred practice.
>
> Still configuring my Ldap for production usage. For my group creation
> problem (with attributes with set values), I'll post a patch in jira soon.
>
> I'm trying to achieve subGroups (group of group in fact). Looking at the
> examples and the test configs, I realise I have to use ldapReference
> and/or ldapReferenceTree, but I can't figure out how exactly to do it yet.
>
> My nuxeo managed groups have objectClass "gosaGroupOfNames" with
> attribute "member = uid=username,dc=example,dc=com" for members.
> I can put our general group in there "member =
> cn=personGroup,ou=Groups,dc=example,dc=com".
>
> Unfortunatly, nuxeo can't see the members of those groups.
>
> My internal groups have objectClass of "posixGroup" and the members are
> identified with "memberUid = myUid".
>
> Should I create another "directory" element to configure the lookup of
> group members? Should I put a specific value in dynamicAttributeId of
> ldapReference? Should I user ldapTreeReference?
>
> To put things in context, our ldap is OpenLdap, managed with GOsa
> (https://oss.gonicus.de/labs/gosa/) and is structured around posixGroup.
>
> Thanks for any help in sorting this out.
>
> Patrick Turcotte
> Revolution Linux
>
>
> _______________________________________________
> ECM mailing list
> ECM@...
> http://lists.nuxeo.com/mailman/listinfo/ecm
> To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm
>

_______________________________________________
ECM mailing list
ECM@...
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm