The ldap groups fails when mapping based on "Groups are specified by LDAP attributes" or "Groups exist as LDAP entries where a multivalued attribute contains the members' CNs".

By fail, I mean the role that theldap group is mapped to is not given to the user.

I believe the fundamental problem here is the ldap_groups field in the ldap_auth table. I don't see how the drupal groups can be known ahead of time with either of these configurations as its a result of a query to ldap.

I've tried both of these methods with and without filtering.

I'm using MS Active DIrectory for LDAP and Drupal 6.10 and binding to ldap with a single machine/service account.

Comments

miglius’s picture

miglius commented

See #318174: Make LDAP Group to Role mapping configurable via web interface

miglius’s picture

miglius commented
Status: Active » Postponed (maintainer needs more info)

'ldapgroups_groups' field is meant to restrict a user login based on the LDAP groups. It has nothing to do with a role mapping.

johnbarclay’s picture

johnbarclay commented
Version: master » 6.x-1.x-dev
Assigned: Unassigned » johnbarclay
Category: bug » support

I changed the wording on the fieldset to the same as the field heading: LDAP groups which allow automatic account creation

This avoids this confusion.

cgmonroe’s picture

cgmonroe commented
Status: Postponed (maintainer needs more info) » Closed (fixed)

If I read the thread above correctly, this is fixed in the dev version with better form wording.... re-open if I'm wrong.