[
https://jira.nuxeo.com/browse/NXP-6430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=90045#action_90045
]
Olivier Grisel commented on NXP-6430:
-------------------------------------
Maybe this is a missing schema issue? This can be the case for instance with
dynamic groups on OpenLDAP if I remember correctly.
Please give it a try with Open DS http://www.opends.org/ , it's just a couple
of minutes to setup (with an intuitive configuration wizard).
For the subGroups / parentGroups issue I don't see any easy fix... Would it's
be possible to map them to another LDAP field with another reference (be it
static by static ID or static DN?).
Another alternative would be to extend the FieldMapper to handle empty mappings
that will make the LDAPSession ignore fields mapped to a None attribute instead
of trying to read / write non existing attributes.
BTW, thanks again for your contribution.
> POSIX group support
> -------------------
>
> Key: NXP-6430
> URL: https://jira.nuxeo.com/browse/NXP-6430
> Project: Nuxeo Enterprise Platform
> Issue Type: New Feature
> Components: Directory
> Affects Versions: 5.4.0.1
> Reporter: François-Denis Gonthier
> Attachments: nuxeo-posix-groups, nuxeo-posix-groups
>
>
> Hello,
> I have been asked to implement POSIX group support in Nuxeo. We use the RFC
> 2307 schema [1]. This patchs only touches LDAPReference.java. It extends the
> staticAttribute option with a new boolean option called staticAttributeIsId
> where a true value indicates the content of the staticAttributeId field is
> the Id of an LDAP object instead of a DN.
> <ldapReference field="members"
> directory="userDirectory"
> forceDnConsistencyCheck="false"
> staticAttributeId="memberUid"
> staticAttributeIsId="true" />
> The patch is mostly working on my side. I can view, add and remove users from
> groups, and add and remove groups from users. My current version of the patch
> is attached to this message and was pushed to a personnal Hg repository [2].
> I have not submitted a bug report on this because I'm stumbling on an
> unrelated problem.
> The POSIX group object doesn't support subGroups but Nuxeo seems to expect to
> find subGroups in a group definition. If I don't add a dummy reference such
> as this one, Nuxeo crashed in various ways, all related to the missing
> subGroups link.
> <!-- This doesn't make sense but I need that to test the patch -->
> <ldapReference field="subGroups"
> directory="groupDirectory"
> staticAttributeId="memberUid"
> forceDnConsistencyCheck="false"
> staticAttributeIsId="false" />
> Is there are way to tell Nuxeo that the directory doesn't support subGroups,
> that may have escaped me? I can take a stab at implementing this feature but
> since it spans several module in Nuxeo, from views to document model, I would
> like to know if there isn't an easy way to do that first.
> [1] http://www.ietf.org/rfc/rfc2307.txt
> [2] https://bitbucket.org/fdgonthier/nuxeo-services-patches
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
