Loading...
 
Skip to main content

ldap auth external groups

Status
Open
Subject
ldap auth external groups
Version
Category
  • Consistency
Feature
External Authentication (LDAP, AD, PAM, CAS, etc)
Resolution status
New
Submitted by
schmidt
Lastmod by
schmidt
Rating
(0)
Description

The "LDAP external group" settings are not correctly used.

In lib/userslib.php around line 1320.
The array "ldap_group_options" is filled with the data for a search on the groups in ldap.
Later on "ldap->get_groups" is called with this options.

Inside "ldap->get_groups" the first action is to call "get_user_attributes".
But now the configuration is set up for the group search, means the search for the user attributes is done with the ldap configuration (host,port,basedn,...) from the "LDAP external groups".

Usually (with a single more or less unstructured ldap) you will not notice it.
But if you have a separate ldap or at least another "scope" for the groups, this will fail, because it will not find the user-attributes in the ldap where the groups are.

I have not thought about a fix yet ... first I wanted to report it 😊

Besides this, there are some harmless typos in lib/userslib.php: auth_ldap_groupdescattr is with one "t" only in some places.

Priority
25
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
5475
Created
Friday 26 September, 2014 13:54:09 UTC
by schmidt
LastModif
Friday 26 September, 2014 13:54:09 UTC


Show PHP error messages