Using 389-ds server, I have a drupal site creating accounts. The accounts are used for server access via ssh. In order to accomplish that, the uidnumber has to be set so when the user logs in, the server knows who they are.

However, this DS server (389-ds), apparently has no concept of incrementing a value that I could find. But I need this to happen when a new account is created. So what comes to mind is this:

Possibility 1:

1) new account is approved by admin
2) ldap server is queried to determine the highest value of uidNumber. (this could be an intensive ldap query based on the number of objects!)
3) set the uidNumber attribute in the $ldif
4) send the $ldif to the ldap server

Possibility 2:
The other possibility is to store the last value of uidNumber used as a variable in the variable table. The steps would be the same as in #1 above but this assumes that this Drupal site is the only creator of accounts.

Any one else had this challenge?

Thanks,
Dave

Comments

rexconsulting’s picture

Hello, You should check out this link here http://www.rexconsulting.net/ldap-protocol-uidNumber.html, provided by Rex Consulting, on the best practice for autoincrementing a UID number in an LDAP directory.

john franklin’s picture

Issue summary: View changes
Status: Active » Fixed

I don't see the Drupal connection here. Are you having a problem with the LDAP Provisioning module or do you just need general LDAP help?

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.