[CPS-users] Re: CPSLDAPSetup

[Olivier Grisel]

Mario Olimpio de Menezes a écrit :
> Hi,
> 
>     After fixing (installing) python2.4-ldap I was able to import CPSLDAPSetup 
> profile, that is, almost able to.
>     I need some help to understand the fields in members_ldap.xml 
> (directories).
>     My setup is:
>     ldap will be used only to authenticate users in read-only mode; I must use 
> this server in read-only mode, so binds will be anonymous, just to get user 
> password field and authenticate the user.
>     groups and roles will be stored on ZODB.
>     I was able to do this with LDAPUserFolder and have some notes I wrote down 
> about my config, but I could find a correspondence between all them and the 
> fields in members_ldap.xml (directories)
>     Could someone provide me some hints on this?

To setup read/write permissions on the directories you can adjust the ACL_* 
properties of the directories configuration (either directly in the ZMI in 
portal_directories or in the directories/my_directory.xml in the profile).

If you want per-field permission settings you must adjust similar ACL properties 
in the corresponding schema (in portal_schemas in the ZMI or schemas/members.xml 
for instance in the profile).

Don't forget to reimport the profile if you make changes to the xml files to 
apply your changes to the objects living in the ZODB.

To bind as "anonymous", use an empty bind_dn/password in the directory 
configuration.

-- 
Olivier