Hello Andrea,

thank you very much for your answer, we did manage to make it work now.

I would like to ask you one more thing, we have a delicate situation going
on with the AD that we are connecting to, basically the administration user
that we have is not able to alter in any way or shape the users but only a
certain group, and when I go and try to modify the user from the apache
syncope console and then assign it to a group I get an error saying that I
do not have enough access rights, this must be because the operation that
syncope is doing is trying to modify the user attribute and assign it to a
group but the administrative user we configured the connector with does not
have enough rights in order to do this.

We have tried to launch an ldif file with ldapmodify using that same
administrative user with restricted access rights in which we modified the
group attribute and that way it worked, an example of how it was is the
following

dn: cn=GroupName,ou=Groups,dc=example,dc=com
changetype: modify
add: uniquemember
uniquemember: uid=UserName,ou=People,dc=example,dc=com

So by modifying the group we are able to assign members to it but not by
modifying the users directly, but I could not manage to find if it was
possibile to assign a member to a group using the syncope console this way.

Is there an existing class that is able of letting assign members to a group
this way or do we need to create one?

Thank you very much again.

Best regards

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Reply via email to