Trouble getting group syncronisation to work

[insti...@googlemail.com]

Hey everyone,

i got auth working fine, now i'd like to add in syncing of groups over
to django groups without success.

The LDAP setup has a Groups ou that seems to be posixGroups. Each
entry has members stored in memberUid.

Here's stripped to related what i am doing in settings.py, but even
tho auth is still working fine i dont get any groups synced.

AUTH_LDAP_SERVER_URI = "ldap://192.168.105.50"

AUTH_LDAP_USER_DN_TEMPLATE = "uid=%
(user)s,ou=Users,dc=mackevision,dc=de"
#AUTH_LDAP_USER_SEARCH = LDAPSearch("ou=users,dc=mackevision,dc=de",
ldap.SCOPE_SUBTREE, "(uid=%(user)s)")

AUTH_LDAP_USER_ATTR_MAP = {
"first_name": "givenName",
"last_name": "sn",
}


AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=Groups", ldap.SCOPE_SUBTREE,
"(objectClass=posixGroup)")

AUTH_LDAP_GROUP_TYPE = PosixGroupType()


AUTH_LDAP_MIRROR_GROUPS = True

# This is the default, but I like to be explicit.
AUTH_LDAP_ALWAYS_UPDATE_USER = True

# Use LDAP group membership to calculate group permissions.
AUTH_LDAP_FIND_GROUP_PERMS = True

AUTHENTICATION_BACKENDS = (
'django_auth_ldap.backend.LDAPBackend',
'django.contrib.auth.backends.ModelBackend',
)

Any hints what i might be missing ?

Regards,
Thorsten

[Peter Sagerson]

The first thing I notice is that your group search doesn't have a fully qualified DN:

AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=Groups", ldap.SCOPE_SUBTREE, "(objectClass=posixGroup)")

Try:

AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=Groups,dc=mackevision,dc=de", ldap.SCOPE_SUBTREE, "(objectClass=posixGroup)")

[insti...@googlemail.com]

That did the trick! Thanks a lot for the quick reply. Had somehow
forgotten to try that one (had it in when i
was testing it with NestedGroupNames before realising i had to use
posixGroups)

Regards,
Thorsten

On Aug 17, 7:03 pm, Peter Sagerson <psag...@ignorare.net> wrote:
> The first thing I notice is that your group search doesn't have a fully qualified DN:
>
> AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=Groups", ldap.SCOPE_SUBTREE, "(objectClass=posixGroup)")
>
> Try:
>
> AUTH_LDAP_GROUP_SEARCH = LDAPSearch("ou=Groups,dc=mackevision,dc=de", ldap.SCOPE_SUBTREE, "(objectClass=posixGroup)")
>

>  smime.p7s
> 5KViewDownload

[Di majo]

MT103/202 DIRECT WIRE TRANSFER
PAYPAL TRANSFER
CASHAPP TRANSFER
ZELLE TRANSFER
LOAN DEAL
TRANSFER WISE
WESTERN UNION TRANSFER
BITCOIN FLASHING
BANK ACCOUNT LOADING/FLASHING
IBAN TO IBAN TRANSFER
MONEYGRAM TRANSFER
IPIP/DTC
SLBC PROVIDER
CREDIT CARD TOP UP
DUMPS/ PINS
SEPA TRANSFER
WIRE TRANSFER
BITCOIN TOP UP
GLOBALPAY INC US
SKRILL USA
UNIONPAY RECEIVER

Thanks.


NOTE; ONLY SERIOUS / RELIABLE RECEIVERS CAN CONTACT.

DM ME ON WHATSAPP
+44 7529 555638