linux-traipu team mailing list archive

[Theodotos Andreou <932837@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Currently the auth-ldap only supports singleLevel search
(LDAP_SCOPE_ONELEVEL) which is not very useful for organisations with
complicated structure. For example in our university each department has
it's own OU and the users lie under their respective OU. So there is a
need for hierarchical searching under a common Base-Dn

According to the auth-ldap doc page:

"The option LDAP_SCOPE_ONELEVEL option is used when searching the LDAP
directory. This means you must specify the full base-dn. For instance,
if you have users defined in the dn ou=people,dn=example,dn=com
authentication will fail if you only specify dn=example,dn=com. A
consequence of this is that all your Drizzle users must belong to the
same LDAP organizationalUnit.

This is currently a fixed option and can only be changed by editing
source code. However, there is no reason why it couldn’t be a
configurable option to also allow multi level searches. Please contact
the Drizzle developers if you have such needs. (See Help and Support)"

So here I am requesting for multi level searches (wholeSubtree) support
for auth-ldap if  it's not to hard to implement.

** Affects: drizzle
     Importance: Undecided
         Status: New


** Tags: auth-lap multilevelsearches

-- 
You received this bug notification because you are a member of UBUNTU -
AL - BR, which is subscribed to Drizzle.
https://bugs.launchpad.net/bugs/932837

Title:
  FEATURE REQUEST: Add "wholeSubtree search capabilities in auth-ldap

Status in A Lightweight SQL Database for Cloud Infrastructure and Web Applications:
  New

Bug description:
  Currently the auth-ldap only supports singleLevel search
  (LDAP_SCOPE_ONELEVEL) which is not very useful for organisations with
  complicated structure. For example in our university each department
  has it's own OU and the users lie under their respective OU. So there
  is a need for hierarchical searching under a common Base-Dn

  According to the auth-ldap doc page:

  "The option LDAP_SCOPE_ONELEVEL option is used when searching the LDAP
  directory. This means you must specify the full base-dn. For instance,
  if you have users defined in the dn ou=people,dn=example,dn=com
  authentication will fail if you only specify dn=example,dn=com. A
  consequence of this is that all your Drizzle users must belong to the
  same LDAP organizationalUnit.

  This is currently a fixed option and can only be changed by editing
  source code. However, there is no reason why it couldn’t be a
  configurable option to also allow multi level searches. Please contact
  the Drizzle developers if you have such needs. (See Help and Support)"

  So here I am requesting for multi level searches (wholeSubtree)
  support for auth-ldap if  it's not to hard to implement.

To manage notifications about this bug go to:
https://bugs.launchpad.net/drizzle/+bug/932837/+subscriptions