This seems like a critical one as ldap data to drupal role mapping can be quite complex.

hook_ldap_authorization_map_to_group($username, $ldap_user_object or attributes)

http://drupal.org/node/627708

Comments

johnbarclay’s picture

This hook is looking like this so far:

hook_ldap_authorization_maps_alter(&$user, &$user_ldap_entry, &$ldap_server, &$ldap_authz_map_config, &$authz_ids)

this will allow the modules implementing the hook to:
- have $user, $user_ldap_entry, $ladap_server, and $ldap authorization configuration to work with in their mappings
- know, add to, and affect mappings from other authorization modules ($authz_ids)

johnbarclay’s picture

Title: LDAP Authorization: Provide hook for mapping ldap user data to drupal roles » LDAP Authorization: Groups only allows single level OU in users's DN (does not allow multiple level OU)

Not sure if I understand this use case, but looks easy to incorporate:

#732780: Groups only allows single level OU in users's DN (does not allow multiple level OU)

johnbarclay’s picture

Version: 7.x-1.x-dev » 7.x-2.x-dev
johnbarclay’s picture

Status: Active » Closed (duplicate)

This should be implemented with tokens and wildards. Moving to #1281422: LDAP Authorization - mapping to roles with wildcards