Hey all,
I have a slight issue with LDAP authentication with Group Membership turned on for the way things are set with our OpenLDAP Server. First, let me say that I've tried to search the forum but could not find any that relates to my issue, but if there is any please correct me.
LDAP authentication works perfectly, but our OpenLDAP group configuration is set a bit different than what SugarCRM wants.
Here is what it looks like:
cn=group,dc=company,dc=net
member=uid=user1,dc=company,dc=net
member=uid=user2,dc=company,dc=net
I've only managed to set SugarCRM to search for members in the group with User Attribute = uid and Group Attribute = member, which will search, for example:
member=user1
which in our case will return zero results.
I have tried to check by manually adding a new attribute in the LDAP so it looks like this:
cn=group,dc=company,dc=net
memberUid=user1
memberUid=user2
Now the authentication works perfectly with User Attribute = uid and Group Attribute = memberUid. But of course since we have many users, manually adding the attributes for each of the members would be cumbersome; especially if there are new users or removing existing users.
My question is, can I somehow set so that Sugar searches the attribute with a static string? For example:
"uid=$(uid),dc=company,dc=net"
Since all members are in the same base dn so I wouldn't have to worry about dynamic dn except for the uid.
I'm using SugarCE 5.5.4 and have tested with SugarCE 6.1.0 as well.


1Likes
LinkBack URL
About LinkBacks



Reply With Quote

Bookmarks