Ldap Import and Groups

Hi there,
I’ve tried the ldap import script which run smoothly except for one
thing: the users weren’t put in the group specified.

As far as I understood,

#The Group new users belong to (optional)
#All new users will belong to the ‘Imported from LDAP’ group
#You can change the name of this group using the $LDAPGroupName
#variable
Set($LDAPGroupName,‘Imported Users’);
#If you would like to prevent users from being added to any
#additional groups, you can set this to true:
Set($LDAPSkipAutogeneratedGroup, 1);

Set($LDAPUpdateUsers,1);

With this setting, the users should be put in a group called “imported
users”. This didn’t happen. So I assumed the group needed to be created
manually, which I did, but still no user was put in the group (in the
second try I had some new users, so there’s no risk of an overlapping
problem of inability to move users).

Am I doing something wrong?

From another point of view: I can’t find if there’s a way to select
users in the “Users” interface other than by username match. It would be
great to be able to select all unprivileged users, or all users with no
group membership.

Thanks,
Giuseppe

Giuseppe Sollazzo
Senior Systems Analyst
Computing Services
Information Services
St. George’s, University Of London
Cranmer Terrace
London SW17 0RE

Email: gsollazz@sgul.ac.uk
Direct Dial: +44 20 8725 5160
Fax: +44 20 8725 3583

Hi there,
I’ve tried the ldap import script which run smoothly except for one thing: the users weren’t
put in the group specified.

The documentation could use some revising it seems
setting LDAPSkipAutogeneratedGroup to 1 means no users will be added
to LDAPGroupName

-kevin

Ah, ok.
The docs say “prevents users from being added to any additional group”
I had supposed it was referring to auto creation of ldap groups. That
“additional” is a bit misleading, if it could go in the next version
that would be great.

Thanks,
GOn 09/06/11 17:18, Kevin Falcone wrote:

On Thu, Jun 09, 2011 at 05:06:15PM +0100, Giuseppe Sollazzo wrote:

Hi there,
I've tried the ldap import script which run smoothly except for one thing: the users weren't
put in the group specified.

The documentation could use some revising it seems
setting LDAPSkipAutogeneratedGroup to 1 means no users will be added
to LDAPGroupName

-kevin

As far as I understood,

#The Group new users belong to (optional)
#All new users will belong to the ‘Imported from LDAP’ group
#You can change the name of this group using the $LDAPGroupName
#variable
Set($LDAPGroupName,‘Imported Users’);
#If you would like to prevent users from being added to any
#additional groups, you can set this to true:
Set($LDAPSkipAutogeneratedGroup, 1);

Set($LDAPUpdateUsers,1);

With this setting, the users should be put in a group called "imported users". This didn't
happen. So I assumed the group needed to be created manually, which I did, but still no user
was put in the group (in the second try I had some new users, so there's no risk of an
overlapping problem of inability to move users).

Am I doing something wrong?

From another point of view: I can't find if there's a way to select users in the "Users"
interface other than by username match. It would be great to be able to select all
unprivileged users, or all users with no group membership.

Thanks,
Giuseppe


Giuseppe Sollazzo
Senior Systems Analyst
Computing Services
Information Services
St. George’s, University Of London
Cranmer Terrace
London SW17 0RE

Email: [1]gsollazz@sgul.ac.uk
Direct Dial: +44 20 8725 5160
Fax: +44 20 8725 3583

References

Visible links
1. mailto:gsollazz@sgul.ac.uk

Giuseppe Sollazzo
Senior Systems Analyst
Computing Services
Information Services
St. George’s, University Of London
Cranmer Terrace
London SW17 0RE

Email: gsollazz@sgul.ac.uk
Direct Dial: +44 20 8725 5160
Fax: +44 20 8725 3583

Ah, ok.
The docs say “prevents users from being added to any additional
group” I had supposed it was referring to auto creation of ldap
groups. That “additional” is a bit misleading, if it could go in the
next version that would be great.

There is already a documentation clarification on github> On 09/06/11 17:18, Kevin Falcone wrote:

On Thu, Jun 09, 2011 at 05:06:15PM +0100, Giuseppe Sollazzo wrote:

Hi there,
I’ve tried the ldap import script which run smoothly except for one thing: the users weren’t
put in the group specified.
The documentation could use some revising it seems
setting LDAPSkipAutogeneratedGroup to 1 means no users will be added
to LDAPGroupName

-kevin

As far as I understood,

#The Group new users belong to (optional)
#All new users will belong to the ‘Imported from LDAP’ group
#You can change the name of this group using the $LDAPGroupName
#variable
Set($LDAPGroupName,‘Imported Users’);
#If you would like to prevent users from being added to any
#additional groups, you can set this to true:
Set($LDAPSkipAutogeneratedGroup, 1);

Set($LDAPUpdateUsers,1);

With this setting, the users should be put in a group called “imported users”. This didn’t
happen. So I assumed the group needed to be created manually, which I did, but still no user
was put in the group (in the second try I had some new users, so there’s no risk of an
overlapping problem of inability to move users).

Am I doing something wrong?

From another point of view: I can’t find if there’s a way to select users in the “Users”
interface other than by username match. It would be great to be able to select all
unprivileged users, or all users with no group membership.

Thanks,
Giuseppe


Giuseppe Sollazzo
Senior Systems Analyst
Computing Services
Information Services
St. George’s, University Of London
Cranmer Terrace
London SW17 0RE

Email: [1]gsollazz@sgul.ac.uk
Direct Dial: +44 20 8725 5160
Fax: +44 20 8725 3583

References

Visible links

  1. mailto:gsollazz@sgul.ac.uk


Giuseppe Sollazzo
Senior Systems Analyst
Computing Services
Information Services
St. George’s, University Of London
Cranmer Terrace
London SW17 0RE

Email: gsollazz@sgul.ac.uk
Direct Dial: +44 20 8725 5160
Fax: +44 20 8725 3583