import users into groups

[perler]

We try to do a semi-automated migration from nextcloud to cloudtron (with using cloudron for user management).

We now try to import users into the cloudron user management, which is documented (although btw this link is broken:

As far as I can see, we cannot import users into groups which then are mapped to nextcloud groups. Is this right? Is there any LDAP/SQL magic to make this happen or can you point us to where the cloudron user management backend is located, so that we can try it ourselves?

[girish]

https://docs.cloudron.io/user-management/#import-users is the correct doc link (fixed this for next release).

As for nextcloud mapping, currently groups are not exposed to the app with user management. But I think maybe it's high time we fixed this (since the external LDAP server already supports this). We can just expose groups that are assigned to the app. @nebulon what do you think?

[perler]

@girish this sounds good.

what we kind of miss in the whole project is some kind of hierarchy in user management, so that we can use cloudron as a multi client server.

for instance, right now, when exposing the groups to nextcloud, the nextcloud group name must be unique within cloudron LDAP, so, another nextcloud instance can't have the same group name. or are we missing something?

ideally:

client 1
    randomgroup
client 2
    randomgroup

right now we are doing it like this by naming:

client1-randomgroup
client2-randomgroup

[nebulon]

@perler mostly Cloudron is developed from a viewpoint where there is one Cloudron per organization and not one Cloudron serving many orgs. This is also because it keeps complexity lower while it being quite trivial by now to spin up servers.

[perler]

@nebulon ok, I understand.

re the original question, is there a way to import groups and user/group association into LDAP?

[perler]

@girish ok, the usual question, how long do you think until groups are exposed into nextcloud? (this decides if we are implementing a workaround or wait for you..)

[nebulon]

@perler groups are already exposed to apps via LDAP only Nextcloud handles those a bit oddly. There is a separate thread about this at https://forum.cloudron.io/topic/7151/ldap-group-support-in-nextcloud/5

[perler]

@nebulon can you maybe have a look into the other thread, I am a bit stuck but it would be important to get this right for a porject of mine.