I have LDAP Integration setup and it authenticates users properly. Right now it allows anyone who has a valid LDAP account to login to Drupal. I have permissions setup in Drupal to control who can edit what.

I'm concerned that if I don't have permissions setup correctly, users who aren't suppose to have access to Drupal can login cause trouble. Is there a way to only allow users who have permissions setup to login?

Comments

bacon’s picture

bacon commented
Status: Active » Postponed

Did you figure this out? This probably should have been posted in the forums, not the issue queue.

But anyway the LDAP Groups module let's you setup which LDAP groups can log in and have their accounts created automatically. It also allows you to map LDAP groups to Drupal roles so you'd basically not give (m)any permissions to authenticated users and if a user is in a particulare LDAP group they will be added to the role that you setup whom can edit content.

rgraves’s picture

rgraves commented

Thanks. I will repost this to the forums. I haven't figured it out yet. Haven't had too much time to look at it.

I don't think LDAP Groups will work for us, but I will take a look at it.

bacon’s picture

bacon commented
Status: Postponed » Closed (works as designed)