IG, if you _change_ an enum / define in libcitadel you have to increase the library version number.
That's kind of what I was getting at. By default it would use the "Domain
Admins" group to determine who gets admin level access, but if someone wants
to change it to a custom group name such as "Citadel Admins" they could do
so.
The only snag I can see with that is if they get something like
Or allow the Citadel admin to specify a custom group name to be used to define
the administrators.
Stupid question about AD and LDAP. How are the logon name, first & last
name, and display name being encoded? Are they not distinct fields in the
LDAP response?
Yes, I do see the problem. Now we have to find an elegant way to address
it. The concept of "name your admin" doesn't seem to fit well with LDAP.
Perhaps we should go with the group thing. Perhaps if the authentication
mode is AD then we should skip that entirely and simply use group membership