Maybe cosmetic... For what it's worth, the ldap_authorization configuration setting for ldap_authorization "derive druple roles from entry" (II.C) is really confusing. The only thing that made it understandable was the concrete "group example" -- which is what everyone wants to do anyway.

Still, the wording of the checkbox label left me wondering if this setting would work with my directory that stores group members as DNs.

See attached screenshot.

CommentFileSizeAuthor
drupal_screenshot.png46.47 KBsrinivas.kakde

Comments

johnbarclay’s picture

johnbarclay commented
Status: Active » Needs work

Please don't report bugs against 7.x-2x unless its ldap provision stuff. No one is working on it.

Options IIA and IIB are the only ones I ever use and no one has ever been willing to improve the UI. This thread may help you understand this: #1066608: module is not checking the OU roles object by looking for a member that is the DN.

Please submit a patch for a clearer UI against 7.x-1.x after looking at 7.x-1.x-dev.

johnbarclay’s picture

johnbarclay commented
Version: 7.x-2.x-dev » 7.x-1.x-dev
Category: bug » task
johnbarclay’s picture

johnbarclay commented
Title: Checkbox label for ldap_authorization "derive druple roles from entry" is confusing » LDAP Authorization: II.C. Checkbox label for ldap_authorization "derive druple roles from entry" is confusing
Version: 7.x-1.x-dev » 7.x-2.x-dev
johnbarclay’s picture

johnbarclay commented
Status: Needs work » Closed (fixed)

This is rewritten in 7.x-2.x to look at the group definitions in a more holistic way.