[Zope] LDAPUserFolder question.

Braun Brelin bbrelin@openapp.biz
Tue, 10 Jun 2003 16:52:31 +0100


That seemed to work.  Thanks.  Now I have one more question.  :-) 

The documentation seems to says that user roles should be stored as "groups" in
LDAP. So, just to clarify, if I have the following user roles:

Manager
Member
Owner
Author
Publisher
Reviewer
Dept_Member

Should each of these roles be listed as a separate group in LDAP?  

Thanks,

Braun Brelin




Quoting Jens Vagelpohl <jens@zope.com>:

> 
> > I have an LDAP question here.  When configuring the LDAP User folder,  
> > The User
> > Base DN looks something like this:
> >
> >
> > ou=Administration,ou=Occupations,ou=Internal,ou=Personnel,dc=<MyClient> 
> > ,dc=<Clients
> >  Domain>
> >
> > The problem I have is that the first ou, which I list as  
> > Administration, is
> > really a variable, i.e. I could have ou=Administration, or ou=Finance,  
> > etc. etc.
> > etc. depending on who logs in.
> >
> > How do I tell LDAPUserFolder (or LDAP itself) that the first ou is a  
> > variable
> > field rather than a constant?  I tried doing ou=*,ou=... but that  
> > doesn't work.
> >
> 
> you cannot. what you need to do is trim the base DN down to the branch  
> that they all share. in your case that would be
> 
> > ou=Occupations,ou=Internal,ou=Personnel,dc=<MyClient>,dc=<Clients
> 
> jens
> 




-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/