Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP drivers are too opinionated about group membership schema #2124

Closed
rhafer opened this issue Oct 1, 2021 · 2 comments
Closed

LDAP drivers are too opinionated about group membership schema #2124

rhafer opened this issue Oct 1, 2021 · 2 comments

Comments

@rhafer
Copy link
Contributor

rhafer commented Oct 1, 2021

The groupmembership lookups in the user- and groupproviders assume that the membership attribute in a group directly maps to the user's name. So this basically only works with LDAP servers implementing the RFC2307 Schema (posixGroup). And even then only when the reva uid Attribute (OpaqueID) matches the user's name.

I think we need to make this a bit more flexible by supporting

  • "native" LDAP groups. I.e. groups using the groupOfNames Objectclass, where the member as listed as full DNs in the member Attribute
  • Allow the use of attributes other than the loginname for the uid for example entryUUID or objectGUID (in the ActiveDirectory case) without breaking group membership lookup.
@micbar
Copy link
Member

micbar commented Mar 7, 2022

Related to owncloud/ocis#3150

@rhafer
Copy link
Contributor Author

rhafer commented May 3, 2022

This has been fixed with: #2708

@rhafer rhafer closed this as completed May 3, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants