Hello,

I want to map Users in an cn to Drupal Groups, for example:

cn=Admins,ou=HQ,ou=SalesGroups,ou=Groups,o=Resources|Managers
cn=Users,ou=EXT,o=Resources|Authors

Config:
1)Group by DN: cn
2)Group by Attributes: memberOf
3)Sort by Entry: none
4)LDAP Group to Drupal role limits: none
5)LDAP Group to Drupal role filtering:

Mapping of LDAP groups to Drupal roles:
cn=Admins,ou=HQ,ou=SalesGroups,ou=Groups,o=Resources => Managers
cn=Users,ou=EXT,o=Resources => Authors

I am getting "Bad mapping syntax." error. I tried everything like putting comma (,) at the end of first line, adding/removing space before and after => but nothing worked.

LDAP Authentication is working fine.

Comments

fxarte’s picture

I think you must use "|" instead of "=>".

verta’s picture

Title: LDAP Group - Unable to create Druapl Role » LDAP Group - Unable to create Drupal role

(spelling for search engine)

verta’s picture

Check the docs, I think the separator character is the pipe.

|
not
=>

johnbarclay’s picture

Category: bug » support
Priority: Critical » Normal

in ldap groups,
- group by dn should produce a group name such as "jbarclay" if the user's dn is cn=jbarclay,ou=campus accounts,...
This is why cn is an odd choice here. "ou" will commonly be used here to get the ou's name mapped to a group.

- memberOf should produce a list of full dns of the groups the user is a member of.

So the mappings should be in the following two forms:

userscn|Managers
cn=Users,ou=EXT,o=Resources,dc=sdfsf,dc=sdfsdf,cd=sdfsdfsdf |Authors

cgmonroe’s picture

Status: Active » Closed (fixed)

Clearing out old support requests - reopen if problem still exists in newest code (dev)