I have a scenario that involves users getting assigned to a pair of Drupal roles, and then group memberships for several groups, all controlled through OG. Users can either be in a basic group with very limited permissions or a moderator level group with a larger set of permissions. Everything is fine for the lower level users, the Drupal role gets assigned, and they also get assigned to all their groups. However, the moderators do not get assigned the OG group memberships unless I remove the Administer Organic groups permission from the second role.

Users in the moderator role get assigned to both the basic role, and the role with more permissions (which needs to provide Administer Organic groups). They should also be assigned to several groups in addition to the Drupal roles. Walking through the debugging messages, LDAP Authorize OG finds the list of groups correctly, but the users do not end up as members of the groups, it just seems to fail quietly. If I remove the offending permission, all group membership assignments happen properly.

I'm not completely sure this is an LDAP module issue, but since the group assignments should be handled here I'm opening the ticket here. If anyone can suggest steps to determine concretely if this is an OG or LDAP issue I'd be happy to do my part.

Comments

Status:Active» Postponed (maintainer needs more info)

What version of OG are you using?

Status:Postponed (maintainer needs more info)» Active

Sorry, OG 7.x-2.3, and here's the LDAP Config file I created for a previous issue.

Issue summary:View changes

fixed typo

Issue summary:View changes

I just encountered this error today. I set up a fresh install of Drupal 7.26 with LDAP 7.x-2.0-beta8 and Organic Groups 7.x-2.6.

I set up the LDAP server, roles and OG groups. LDAP Authorization - Drupal Roles works fine.

LDAP Authorization - OG appears to work fine in testing, but will not actually add some users to the OG groups on login.

A user with Administer Organic groups permissions is not added to the groups.

A user without the permission is added correctly to the Organic Groups.