Tickets :: Comment on [#8847] Groups and attrisdn in non-flat LDAP directory do not work

* Your Email Address
* Spam protection	Enter the letters below: .___. __..___.. .. . \| (__ \| \| \|\| \| \| .__) \| \|/\\|\|__\|
Comment	> In a LDAP Directory with a hierarchical structure and full DN names > as group member entries (like Novell Edirectory) getGroupMemberShip > will not work. > > The culprit is the following code: > > if ($GLOBALS['conf']['group']['params']['attrisdn']) { > $filter .= $GLOBALS['conf']['auth']['params']['uid'] . '='; > } > $filter .= $user; > if ($GLOBALS['conf']['group']['params']['attrisdn']) { > $filter .= ',' . > $GLOBALS['conf']['auth']['params']['basedn']; > } > > The code assumes that a user DN is always flat under the basedn. In a > hierarchical directory structure with sub OU's this not the case, so > the real user DN must be used here! > >
Attachment
Watch this ticket