Loading...
 
Skip to main content

LdaP External Groups Being Flagged as Internal

  • Tracker item actions
Trackers
Items
Status
Open
Subject
LdaP External Groups Being Flagged as Internal
Version
12.x
9.x
Category
  • Usability
Feature
External Authentication (LDAP, AD, PAM, CAS, etc)
Resolution status
New
Submitted by
jcarter
Lastmod by
jcarter
Rating
(0)
Description

When editing an external group (a group created automatically by tiki when syncing groups with ldap) the isExternal flag which should be set to Y is set to N.

Context:
User logs in, and tiki groups are syncing with a OU on the AD, so a group is added. Say this group is "tiki-admin".
We want users part of the group tiki-admin on the AD to have admin perms on the wiki, so we edit the group in tiki and set it to inherit permissions from the local Admin group. When you hit the "Save" button after editing the group (you don't have to change anything) the group's isExternal flag is set to "n", meaning it will not sync like an external group.

Users added to the group in the AD will be added to it in tiki, but users removed from it in the AD will not be removed from the group in tiki.

Solution
I have just manually flagged it as isExternal="y" to keep sync working nicely, but it could be confusing for people who do not look at that stuff.
Workaround
]
Importance
7
Easy to solve?
6
Priority
42
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
4398
Created
Friday 15 March, 2013 19:36:00 UTC
by jcarter
LastModif
Wednesday 11 December, 2013 18:05:05 UTC


Show PHP error messages