[CPS-users] Re: ADS authentication using LDAPUserGroupsFolder

Olivier Grisel ogrisel at nuxeo.com
Fri Mar 31 11:27:16 CEST 2006


Damian Georgiou a écrit :
> Hi all,
> 
> I have installed and configured LDAPUserGroupsFolder into CPS and have 
> it working to an extent. I have configured Groups and Roles within ADS 
> and assign the appropriate Groups and Roles to my test user
> 
> I have also created the Groups, using the exact naming in CPS aswell.
> 
> the roles i have created in ADS are Manager and Member. (two of the 
> default roles in CPS)
> 
> I have assigned member role to my test user.
> 
> When i login, i do not get an authentication and ZMI confirms that, 
> however, the standard member action bar is not loaded nor am i 
> redirected to the sections or workspaces, instead it stays on the login 
> windows.
> 
> If i assign the test user to the manager role, everything works fine. 
> The manager action bar is loaded and i am redirected to the sections 
> display.
> 
> what is everyones thoughts on this?

I suppose ADS means Active Directory Server. For CPS 3.4, LDAPUserGroupFolder is 
no longuer the recommended way to plug CPS to an external source of users. 
Please consider using CPSLDAPSetup instead:

  http://www.cps-project.org/sections/projects/cpsldapsetup

However this won't work out of the box with AD since the 389 LDAP port of AD 
does not work properly + the login_field is sAMAccountName instead of uid.

We are still willing to include an AD specific profile in CPSLDAPSetup if 
someone could contribute it.

-- 
Olivier



More information about the cps-users mailing list
More information about CPS: CPS project - CVS - API

Hosting: Nuxeo: Zope service provider


This list archive provided by Nuxeo, the leaders of open source ECM. Check out the Nuxeo 5 open source, standards-based ECM project.