Either the ldap authorization option "II.C. Derive drupal roles from entry" is broken or just the simpletests are. 2 tests fail which are all that exist for II.C.

Is this option working for anyone?

Comments

bratell’s picture

bratell commented

I've been trying to get that option to work for a while now, to no avail. I would also suggest it's broken.

johnbarclay’s picture

johnbarclay commented

can you give a sense of how you are using it? I still don't get the use case for this option. Maybe some sample ldap entries and config.

bratell’s picture

bratell commented

Actually, I got it to work... nevertheless. This is what I do and why.

I work at a Swedish university and we're giving a course in which the students are to have a brief demonstration of Drupal and also to login and make some simple exercises.

LDAP would be the obvious choise to give everyone access and also roles.

I have set up two groups in my NDS; cn=DrupalStudents,o=hb and cn=DrupalTeachers,o=hb. The members of the groups are from all over the tree. Depending on which group they belong to they get either the Student or Teacher role in Drupal. So a simplified example of config would look something like this:

LDAP DNs containing roles (one per line)
cn=DrupalStudents,o=uni
cn=DrupalTeachers,o=uni

Attribute holding roles members
member

Mapping of LDAP to drupal role
DrupalStudents|Students
DrupalTeachers|Teachers

[x] Use LDAP group to drupal roles filtering

My problem was with the mapping part where I involved DN again.

johnbarclay’s picture

johnbarclay commented
Assigned: Unassigned » johnbarclay
Status: Active » Fixed

I found the problem with this. It was some quotes in the simpletests that weren't removed. This fixed the simpletests. I also added some of bratell example to the form directions.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

johnbarclay’s picture

johnbarclay commented
Title: Authorization: Simpletests for all Derive From Entry Cases are broken » LDAP Authorization: II.C. Simpletests for all Derive From Entry Cases are broken
Version: 7.x-1.x-dev » 7.x-2.x-dev
Status: Closed (fixed) » Active

making all LDAP Authorization: II.C. issues active until this is reworked.

hyrod’s picture

hyrod commented

I have problem to.
Without

[x] Use LDAP group to drupal roles filtering

all good work.
I use 389 directory server and openLDAP profile.

johnbarclay’s picture

johnbarclay commented
Status: Active » Closed (duplicate)