Hi everyone,

To be honest I am not sure if this is a bug or by design but since I dont see much difference between Gloabl and Universal Groups I assumed it was a bug :-(. I have the ldap module installed and configured and everything works great until I get to nested groups configuration. This means with normal groups authorization everything works without a hitch but due to internal IT decisions most groups were converted over to Universal Groups/Nested Universal Groups from Global Groups. When I do a search or test the LDAP server/Authorization it never shows the groups parent. If I create/convert groups to be global groups/global nested groups then it shows me the full Nested groups results. If anyone can point me in the right direction as to the reasoning behind this or ideas on a way to update the module in order to support nested Universal Groups I would greatly appreciate it.

Comments

johnbarclay’s picture

johnbarclay commented
Version: 7.x-2.0-beta5 » 7.x-2.x-dev
Category: bug » support

Sounds like an issue with your Active Directory. Hopefully someone can help you out. Universal and Global are Active Directory terms and have security related functionality that need to be dealt with. Make sure your service account has the correct access to both types of groups for starters. Beyond that maybe someone who has gone through this can help you.

roenb’s picture

roenb commented
Status: Fixed » Active

Ahhhhhh, this plugin is nothing short of Awesome. In case someone else runs into this, the cause of my issue was that the parent group in the live Active Directory was not a member of any other group. I set up a test environment and set up a test group as global nested in another global group where the parent was a member of users. Everything worked as expected. I then switched both to Universal (parent first since universal cannot be nested in global) and it still worked as expected. I then checked the live active directory and saw that the parent UNiversal group was not a member of any other group (i.e. users, admins, etc). I added the Parent Universal group on the live system to a main group and POOF everything worked.

Thanks Johnbarclay :-).

haydeniv’s picture

haydeniv commented
Status: Active » Fixed

Looks like this is fixed then.

Status: Active » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.