Wiki source code of LDAP-Gruppen
Hide last authors
author | version | line-number | content |
---|---|---|---|
17.9 | 1 | LDAP groups are used for managing user data stored on an LDAP server. This will not create any user account within {{formcycle/}}, as it would be created when setting up users as described in the help pages for [[LDAP>>doc:Formcycle.UserInterface.UserSettings.LDAP]]. A virtual account will be created for the user when they sign in. Virtual users will not be written to and saved in the database. | |
1.1 | 2 | ||
17.9 | 3 | {{figure image="1_en_LDAPGroups.png"/}} | |
1.1 | 4 | ||
17.9 | 5 | == Adding an LDAP group == | |
1.1 | 6 | ||
17.9 | 7 | * Click on the {{ficon name="plus-circle-outline"/}} button | |
8 | * Give the LDAP group a name that must be unique, and optionally a description. | ||
9 | * Choose a role that will be assigned to virtual users of this LDAP group when they sign in. | ||
10 | * Select one or more user groups that will be assigned to virtual users of this LDAP group when they sign in. | ||
11 | * Use the LDAP connection of the client, or setup a new connection by entering a new connection. | ||
12 | ** **Host/IP:** Host name or IP address of the LDAP server | ||
13 | ** **Port:** Port of the LDAP server. | ||
14 | ** **Entries per page (Paging):** The number of entries per page expected by the LDAP server. When set to 0, the server will expect all entries at once. | ||
15 | ** **Max. referral hops:** The maximum number of referrals hops that should performed by the LDAP server. When set to 0, references will not be followed at all. | ||
16 | ** **SSL encryption:** Whether the connection to the LDAP server should be encrypted via SSL. | ||
17 | ** **Username:** Username for signing in to the LDAP server. | ||
18 | ** **Passwort:** Password for the user. | ||
19 | * Enter a baseDN to be used as the root when searching for user objects on the LDAP server. | ||
20 | * Optionally, enter a filter string to limit the number of users returned by the server. [[LDAP filter tutorial>>url:http://www.ldapexplorer.com/en/manual/109010000-ldap-filter-syntax.htm||rel="__blank"]]. To open up a list of all existing groups at the current BaseDN click on //Group Search//. You may then choose one by clicking on it and the matching filter query is copied into the field automatically. | ||
1.1 | 21 | ||
17.9 | 22 | You can check the LDAP connection before saving the configuration. To check, click on //check connection//. This will attempt to establish a connection to the LDAP server and return the number of user objects found on the server. | |
1.1 | 23 | ||
17.9 | 24 | An error message will be displayed when no connection could be established. Please contact your system administrator. | |
25 | |||
17.7 | 26 | {{nofooter/}} |