Using LDAP objectclass "groupofnames" with "member" to determinate the group of a user

kaufi88 · Mar 7, 2019, 5:45 PM

Hi there,
in our LDAP-System we have to discover the group membership where members are listed to determine in which group a user is.
So far so good. But we use "groupofnames" and not "posixGroup" as a objectclass.
For this reason, the members in the group are listed with the FQDN and not with the uid.

Does anyone know, how to handle this issue?

I found in the bug tracker this issue: https://redmine.pfsense.org/issues/5461, but there are no more actions since years..

Cheers,
Daniel

stephenw10 · Mar 8, 2019, 8:50 PM

I assume you' ve tried with and without the setting checked for?:

LDAP Server uses RFC 2307 style group membership:
RFC 2307 style group membership has members listed on the group object rather than using groups listed on user object. Leave unchecked for Active Directory style group membership (RFC 2307bis).

Steve

kaufi88 · Mar 8, 2019, 9:07 PM

Sure... without success :(