unusual ldap / user workflow
I think @erics is on vacation and he will fix things up when he is back.
@erics hope you had a great and refreshing vacation!
LDAP preconfiguration is now ok, could you please make some tests ?
luckow last edited by
@erics the two form fields Administrator DN and Administrator password on global parameters are not prefilled with the values from the env.
That's why you get a
TCP connect to LDAP server successful (Server=172.18.0.1, Port=3002) No administrator or password provided. LDAP access will be anonymous and in read only mode. LDAP server configured for version 3
instead of a
TCP connect to LDAP server successful (Server=172.18.0.1, Port=3002) Connect/Authenticate to LDAP server successful (Server=172.18.0.1, Port=3002, Admin=cn=LONGID,ou=apps,dc=cloudron, Password=*****) LDAP server configured for version 3
if you fill in the values manually. But to be fair, I do not know if this is really necessary
On the Groups tab, there is a wrong value in Groups' DN. The current value is
the correct value has to be
Same with above. I don't know if Cloudron LDAP promotes the groups to Dolibarr. IMHO not.
Ups. In the tab Users in the LDAP Mapping you put in a wrong mapping at the Name. It's not
displayNameit has to be
snThat why last name is the value of first and last name in one field.
Administrator DN and Administrator password
at first : thanks a lot for all your tests !!!
Then, for Admin DN and pass are from env parameters from cloudron world so we don't put it in dolibarr config files and don't store it (good idea in case of backup then restore dolibarr in an other cloudron server).
But for group and users mapping i think i made a mistake, really thank you, i will make some updates as soon as possible.
Generally groups within apps and Cloudron groups should not be mixed. We found that they usually have different meanings.
The ldap server only exposes two groups and that is only a workaround for apps which need to find admins (which we are not sure if that is even a good idea). So there is an LDAP group for Cloudron admins and one for other users.
To summarize this, do not configure LDAP groups in the app
@nebulon nice i like this sort of reply