Fri Jul 20 2012 03:29:47 AM EDT from dothebart @ Uncensored Subject: Re: Administrator login when using Active Directory
you have to re-run setup, and specify one of your AD users. On next login he will gain aide rights.
Thanks dothebart, that got me most of the way there.
The next bit
Sun Jul 22 2012 21:43:39 EDT from Lindsay Mathieson @ Uncensored Subject: Re: Administrator login when using Active Directory
Fri Jul 20 2012 03:29:47 AM EDT from dothebart @ Uncensored Subject: Re: Administrator login when using Active Directory
you have to re-run setup, and specify on
Mon Jul 23 2012 11:11:52 CEST from dothebart @ Uncensored Subject: Re: Administrator login when using Active Directory
The next bit took me a while to figure out and I find it a bit puzzling. I was specifying my login name ("lindsay") as the admin, which wasn't working - I had to speci
Mon Jul 23 2012 15:36:20 EDTfrom the_mgt @ Uncensored Subject: Re: Administrator login when using Active Directory
Mon Jul 23 2012 11:11:52 CESTfrom dothebart @ Uncensored Subject: Re: Administrator login when using Active Directory
hm, if Lindsay is right, this is probably not a good idea
isn' t the behaviour wrong in first place? So wouldn't changing it be better than documenting it?
At least it is totally against any intuition. And yes, changing it to the logon name would be the better way to solving it. Ig, what do you think?
I think that this particular workflow is confusing but I'm not yet aware of
a good way to change it.
In an Active Directory environment perhaps we could search to determine whether
the user is a member of the "Administrators" or "Domain Admins" groups, and
make any such user a Citadel admin as
The problem is not one of groupmembership, although I find the idea of mapping AD groups to certain citadel user levels attractive.
The scenario goes like this:
On a fresh AD install, you have the Administrator user which has the logonname "Adminstrator" (under Account tab). The other fields unde
Yes, I do see the problem. Now we have to find an elegant way to address
it. The concept of "name your admin" doesn't seem to fit well with LDAP.
Perhaps we should go with the group thing. Perhaps if the authentication
mode is AD then we should skip that entirely and simply use group membership
