Closed (won't fix)
Project:
Lightweight Directory Access Protocol
Version:
8.x-4.x-dev
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Reporter:
Created:
4 Mar 2020 at 15:11 UTC
Updated:
17 Dec 2020 at 21:27 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
galileo25 commentedAttached patch adds new textarea field to "User Mappings"
Use it to create an additional mapping between drupal role machine name and LDAP role.
Comment #3
grahlHi
Thanks for your input! Unfortunately, in its current formt this will likely not be committed.
Apart from the fact that we're trying to deprecate the 3.x branch this is adding a separate path next to ldap_authorization on role assignment. This will make the user interface more complex and difficult to configure for users. We would need a very good reason to do so, and it's not clear for me yet that this is given here.
Also, even though we have limited test coverage yet for the relevant use cases I'd like to avoid adding even more authorization features which doesn't have any tests.
Comment #4
rcodinaThe patch doesn't work for me.
@grahl When will 4.x be ready? Will it have role mapping feature like in 7.x?
Comment #5
grahl@rcodina You can use it right now, it's not stable yet since we have limited test feedback.
Not sure what you mean by role mapping feature, ldap_authorization is ported is available in 3.x and 4.x.
Comment #6
rcodina@grahl Role mapping feature: For example, in "Simple LDAP" 7.x module, there is a submodule "Simple LDAP Role" which lets you easily define how to assign Drupal roles taking into account LDAP defined permissions given some parameters:
Base DN
Role objectClass
Role name attribute
Role member attribute
I'm not able to configure the same with this LDAP module (Simple LDAP 8.x hasn't this handy submodule and it's unstable). How can I do it?
Thanks!
Comment #7
grahlComment #8
grahlI'm closing this ticket since I don't see any use-case here which isn't supported by ldap_authorization. Please open a separate ticket if there is a specific feature not supported by ldap_authorization for role assignment.