Community & Support

LDAP Integration Module (Specifically LDAP Groups module) help needed

I've set up the LDAP authentication module and LDAP Data module and have been able to successfully synchronize users between drupal and my LDAP server. I am now trying to make it so that the users in the LDAP directory are added to a particular role in my drupal installation. However, I am unsure on how to do that - I've tried to read the documentation and not had much success with it. For anyone that has been able to get it working correctly, would you be able to provide a recipe on how you did so?

Comments

Use LDAP Groups

Drop down the group by Entry area and check "Groups exist as LDAP entries where a multivalued attribute contains the members' CNs"

Put something like this in the box:

cn=drupal-groupName,ou=Groups,ou=IT,o=largeGroup

Then enter the attritube holding group name: member.

This is an example of what to do. Contact the person who setup the LDAP for further help, otherwise get the softerra ldap browser and find out yourself.

Hope this helps,

Cameron

Ditto

I also used the same scheme mentioned here and it works well.

Dave

Dave
(IRC nick: Davea1)
www.ingraftedsoftware.com

Late response

@cameronheikkinen

I tried out what you mentioned to be and I then got it working correctly. Thank you!

thanks

Thanks guys I also used this in conjunction with the filtering to get things working.

Group by entry

[checked] Groups exist as LDAP entries where a multivalued attribute contains the members' CNs

LDAP DNs containing groups (one per line):

CN=ADGroupname,OU=Groups,DC=domain,DC=com

LDAP group to Drupal role filtering

Mapping of LDAP groups to Drupal roles:

CN=ADGroupname,OU=Groups,DC=domain,DC=com|drupalrole

to assign different roles in

to assign different roles in drupal to the LDAP users in Active Directory(note: u shld have the ldap auth running)

first create groups in the LDAP server........say if you want admin role.....then create admin group inside the OU(eg:drupal)...............then add the memberUid attribute(use softerra LDAP administrator free trial) .......these are the users.......

then in groups settings in the group by entry.......
in this case
CN=admin,OU=drupal,DC=domain,DC=com

Attribute holding group members: memberUid...

done... the users will be assigned the admin role when they log in...........