Tickets :: Comment on [#6883] group permission with LDAP does not work

* Your Email Address
* Spam protection	Enter the letters below: . ..__ ._.. . __ \ /[__) \| \ // ` \/ \| \_\|_ \/ \__.
Comment	>> Yup, that'd be a problem. I wonder if we can do a mapping table > >> somewhere, to avoid making the group_id field a string? > > Yep, some ideas: > > > > a) Maybe we could use the horde_groups table normally used by the sql > driver for the mapping. There have to be some mechanism for > synchronisation ith the directory. > > > > b) The second idea is no general solution. Will only work with LDAP > entries with objectclass posixGroup: > > > > The gidNumber attribute could be used as "group_id", but this will > definitly fail with non Posix Groups (e.g. it will fail with Active > Directory). > > > > So I thing a mapping table would be the more general solution, but > synchronisation with the Directory Service is probably the largest > challenge in this approach. > > > > Sincerly, > > Klaus
Attachment
Watch this ticket