Re: [HELP NEEDED] LDAP import AD groups

[Michael Wuttke]

Hello Maxim,

sorry but we use M$ AD and it returns nothing or only errors with this 
query. ;-(

Greetings,
Michael

Am 05.08.2015 um 15:18 schrieb Maxim Solodovnik:
Hello Michael,

Thanks for your reply
I need query to get all groups of user with some uid.

so I get uid for for the user: for ex. "solomax"
I need to get all groups this user is part of.

On my test LDAP server this query:
(&(memberUid=test1)(objectClass=posixGroup)) returns DNs of all groups
for given UID



On Wed, Aug 5, 2015 at 7:11 PM, Michael Wuttke
<michael.wut...@beuth-hochschule.de
<mailto:michael.wut...@beuth-hochschule.de>> wrote:

    Hello Maxim,

    I don't know how to use the ldap_search for your query.

    But we use owncloud. Here are our LDAP queries we use for owncloud:

    the ldap query for users:
    (&(|(objectclass=person))
    
(|(|(memberof=CN=Owncloud-admins,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz0))
    (|(memberof=CN=Students,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz1))
    
(|(memberof=CN=Employee,OU=Global,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz2))
    
(|(memberof=CN=Academics,OU=Global,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz3))
    ))

    the ldap query for login attributes:
    (&(&(|(objectclass=person))
    
(|(|(memberof=CN=Owncloud-admins,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz0))
    (|(memberof=CN=Students,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz1))
    
(|(memberof=CN=Employee,OU=Global,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz2))
    
(|(memberof=CN=Academics,OU=Global,OU=Groups,DC=mycompany,DC=de)(primaryGroupID=xyz03))
    (|(sAMAccountName=%uid)))

    and the ldap query for groups:
    
(&(|(objectclass=group))(|(cn=Employee)(cn=Students)(cn=Owncloud-admins)(cn=Academics)))

    Here is the docu how to configure ldap auth:
    
https://doc.owncloud.org/server/8.1/admin_manual/configuration_user/user_auth_ldap.html

    and the cowncloud code repo the ldap auth app:
    https://github.com/owncloud/core/tree/master/apps/user_ldap

    Maybe it helps you?

    Thanks & Greetings,
    Michael

    Am 05.08.2015 um 14:29 schrieb Maxim Solodovnik:

        ups, sorry wrong keyboard :(((

        ---- Can anyone with access to AD check if this query works in
        AD, and
        сщккусе ше ащк ФВ ша тще,
        ++++ Can anyone with access to AD check if this query works in
        AD, and
        correct it for AD if not,

        On Wed, Aug 5, 2015 at 6:28 PM, Maxim Solodovnik
        <solomax...@gmail.com <mailto:solomax...@gmail.com>
        <mailto:solomax...@gmail.com <mailto:solomax...@gmail.com>>> wrote:

             Hello All,

             I'm currently trying to implement
        https://issues.apache.org/jira/browse/OPENMEETINGS-1214
             I was able to find query to get all groups in LDAP:

             The following query seems to be able to list all groups for
        the user
             with "uid == test1":
        (&(memberUid=test1)(objectClass=posixGroup))

             Can anyone with access to AD check if this query works in
        AD, and
             сщккусе ше ащк ФВ ша тще,

             Thanks in advance!

             --
             WBR
             Maxim aka solomax




--
WBR
Maxim aka solomax

--
Vielen Dank & mit freundlichen Grüßen,
Michael Wuttke

Administration des Lern-Management-Systems
Beuth Hochschule Berlin - Hochschulrechenzentrum
Luxemburger Str. 10
13353 Berlin
Tel: +49 (0)30 45 04 2004
Haus Bauwesen; Raum: D 225a
E-Mail: michael.wut...@beuth-hochschule.de
News: https://lms.beuth-hochschule.de/rss