LDAP User Manager - group configuration question

keylevel · Jun 8, 2011, 12:05 PM

I'm trying to configure an LDAP server for user authentication. I've got as far as being able to authenticate (as in Diagnostics / Authentication indicates that users can authenticate), but I can't get group information to be associated with the user.

My users are stored in ou=Users,dc=localdomain and are identified by uid.

I've got ou=Groups,dc=localdomain holding my groups, including one with a cn=admins (as rdn). These groups have a 'member' attribute.

The member attribute value for admins is uid=testuser,ou=Users,dc=localdomain

I've set 'User naming attribute' to 'uid', 'Group naming attribute' to 'cn' and 'Group member attribute' to 'member'.

'Groups' and 'Users' are both configured as authentication containers.

What do I need to change to get the group information to be associated with the user?

Version is 2.0-RC1 (amd64) built on Sat Feb 26 18:07:23 EST 2011

keylevel · Jun 8, 2011, 1:52 PM

Looking in my LDAP logs, it seems as if the group search is of the form:

SRCH base="uid=testuser,ou=people,dc=localdomain" scope=2 filter="(uid=testuser)" attrs="member"

which won't be searching in oe=groups.

I can't see an obvious way of setting the search base for groups.