LDAP Group Sync in Tiki-9 Broken
- Status
- Closed
- Subject
- LDAP Group Sync in Tiki-9 Broken
- Version
- 9.x
- Category
- Error
- Feature
- External Authentication (LDAP, AD, PAM, CAS, etc)
Group - Resolution status
- New
- Submitted by
- jcarter
- Lastmod by
- jcarter
- Rating
- Description
I was unable to get group sync for ldap working, and after changing two lines of code in userslib.php I was able to get it working.
The changes I made are the procedure section, and I have included my settings also in case someone is having a similar issue, or is just trying to set up LDAP group sync and would like to see a working example, and in case it is useful in your troubleshooting.
- Solution
Procedure
in tiki-9/lib/userslib.php, change line 1222 from
Copy to clipboardif ($prefs['syncGroupsWithDirectory'] == 'y' && $userattributes[$prefs['auth_ldap_group_corr_userattr']] != null) {to
Copy to clipboardif ($prefs['syncGroupsWithDirectory'] == 'y' && $prefs['auth_ldap_group_corr_userattr'] != null) {and changed line 1257 from
Copy to clipboard$ldap_group_options['bind_type'] = 'explicit'to
Copy to clipboard$ldap_group_options['bind_type'] = $prefs['auth_ldap_type']
I then poked around in the code to see how the sync actually occurred, and which settings should be filled, and set the settings as follow:
LDAP External Groups Tab
LDAP Bind settings
<will vary>LDAP User
User DN: OU=People <wherever you want to look for people, this should be an ou>
User Attribute: sAMAccountName
Corresponding user attribute in 1st directory: sAMAccountName
User OC: userLDAP Group
Group DN: <group DN>WarningMake sure not to have the base DN at the end of the group DN, as it will not work if you do!Group name attribute: cn
Group description attribute: description
Group OC: groupLDAP Group Member - if group membership can be found in group attributes
Member attribute: member
Member is DN: TLDAP User Group - if group membership can be found in user attributes
Group attribute:
Group attribute in group entry:LDAP Admin
Admin password: <pw>
Admin user: <user>
General Preferences Tab
Synchronize Tiki groups with a directory: T- Importance
- 9
- Easy to solve?
- 10 easy
- Priority
- 90
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 4284
- Created
- Monday 27 August, 2012 16:43:21 UTC
by jcarter - LastModif
- Monday 09 December, 2013 21:32:59 UTC