Table of Contents |
---|
How to configure multiple users and group bases ?
The Users Base and Groups Base fields on the LDAP configuration screen define a root node to search for entries. The searches are recursive and will traverse the hierarchy starting from those nodes. If your multiple paths share a common base you can configure that value in these properties. For instance, lets assume the following bases:
...
The solution is to include the string ":1.2.840.113556.1.4.1941:" as part of the groupMemberAttribute parameter of the LDAP connector in the frevvo.xml:
...
the Group Member Attribute in your LDAP tenant configuration.
Code Block |
---|
member:1.2.840.113556.1.4.1941: |
If you would like Task Assignments to Role to also include users in nested groups, add the same string to User Member Of attribute.
Code Block |
---|
memberOf:1.2.840.113556.1.4.1941:" override="false"/> |
Can I have more than one LDAP tenant ?
...
- The primary source of information is the log file. In most cases, the LDAP connector will try to indicate what the problem is in the logs. In the log file, look for lines with LDAPSecurityManager or LdapDao.
- It is useful to have an LDAP browser at hand, for instance, the Apache Directory Studio. With the browser you can:
- Check if the connection parameters that you configured in are correct.
- Run queries against LDAP and make sure that the expressions you configured in are correct and returning what you expect.
- If you can't spot the problem and need to contact frevvo support:
- Stop
- Go to <frevvo-home>/tomcat/logs/frevvo.log.
- Follow these steps to change the log level from INFO to DEBUG
- Restart
- Execute the steps that is causing problems.
- Send the log file (zip) to frevvo support (support@frevvo.com) with a description of the problem.
- Restore the log level to INFO.
...