[ 
https://issues.apache.org/jira/browse/CONNECTORS-779?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13771823#comment-13771823
 ] 

Maciej Lizewski commented on CONNECTORS-779:
--------------------------------------------

Yes, I am aware of this behavior. I would not call it "bug" because LDAP 
authority just returns groups provided by LDAP backend and it does not return 
"Everyone" group. It is not assigned explicitly to every user. ActiveDirectory 
works same way for "Everyone" group when queried in LDAP way, but we have 
dedicated connector for ActiveDirectory...

Solution to this issue could be adding configuration with forced groups for 
every user (or at least providing name/SID of "everyone" group) as I am not 
sure if "Everyone" group is the only one treated like this and if it is named 
"Everyone" under all language versions (probably yes).
                
> Novell eDirectory: Group Everyone 
> ----------------------------------
>
>                 Key: CONNECTORS-779
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-779
>             Project: ManifoldCF
>          Issue Type: Bug
>          Components: LDAP authority
>    Affects Versions: ManifoldCF 1.3
>            Reporter: Nicolas Belisle
>            Assignee: Maciej Lizewski
>            Priority: Minor
>             Fix For: ManifoldCF 1.4
>
>
> We had an issue with authorization using Novell eDirectory.
> The group "Everyone" was in the index (field allow_token_document), but would 
> not be listed using "mcf-authority-service/UserACLs?username=userID". No 
> configuration change seemed to solve it.
> We added it manually to 
> org.apache.manifoldcf.authorities.authorities.ldap.LDAPAuthority
> line 316 : theGroups.add("Everyone");

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to