Moving this discussion too back to the mailing list.

2014-04-01 20:26 GMT+02:00 Cliff Ingham <[email protected]>:

> I've tried simply setting member={0}, but that does not work.  And I'm
> not really certain how that could.  How does the system know our full DN
> for users?


This is simple: when you authenticate geoserver gets the full user info
(including his/her DN from the LDAP repository, then it can use that or the
entered username to look for group membership). The fact that it doesn't
assign you admin role could be due to:
 - inability to search for membership for security reasons (but normally a
logon user should be able to to those searches)
 - wrong search filter
 - some bugs in the code

We had recently some problems when the folder containing groups has
subfolders inside. Could this be your case?

Thanks
Mauro Bartolomeoli


-- 
==
Meet us at GEO Business 2014! in London! Visit http://goo.gl/fES3aK
for more information.
==

Dott. Mauro Bartolomeoli
@mauro_bart
Senior Software Engineer

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:     +39 0584 1660272

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
------------------------------------------------------------------------------
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to