So ... die Kiste laeuft!
Wens interessiert, wie des Raetsels Loesung lautet:
1. LDIF-Datei ein wenig umgestellt:
Code:
dn: cn=User 1,ou=people,dc=domain,dc=tld
objectClass: inetOrgPerson
>objectClass: organizationalPerson
cn: User 1
uid: user_1
>seeAlso: cn=admins,ou=groups,dc=domain,dc=tld
>seeAlso: cn=app_user,ou=groups,dc=domain,dc=tld
userPassword: klsdjf;askd
description: FE_USER
dn: cn=User 2,ou=people,dc=domain,dc=tld
objectClass: inetOrgPerson
>objectClass: organizationalPerson
cn: User 2
uid: user_2
>seeAlso: cn=app_user,ou=groups,dc=domain,dc=tld
userPassword: skldjfa;sldkfj
description: FE_USER
dn: cn=admins,ou=groups,dc=domain,dc=tld
<objectClass: groupOfNames
>objectClass: organizationalRole
cn: admins
description: administrator group
<member: cn=User 1,ou=people,dc=domain,dc=tld
dn: cn=app_user,ou=groups,dc=domain,dc=tld
<objectClass: groupOfNames
>objectClass: organizationalRole
cn: webuser
description: webuser group
<member: cn=User 1,ou=people,dc=domain,dc=tld
<member: cn=User 2,ou=people,dc=domain,dc=tld
... und dann 2. noch die Konfiguration von ldap_server angepasst:
Code:
FEusers = LDAP_SYNC
FEusers {
enable = 1
table = fe_users
basedn = ou=people,dc=domain,dc=tld
handleNotFound = 1
handleNotFound {
delete = 1
}
pid = 8
filter = (&(objectClass=inetOrgPerson)(objectClass=organizationalPerson)(description=FE_USER))
uniqueField = tx_ldapserver_dn
fields {
username = MAP_OBJECT
username.attribute = uid
tx_ldapserver_dn = MAP_OBJECT
tx_ldapserver_dn.special = DN
password = MAP_OBJECT
password.attribute = userPassword
usergroup = MAP_OBJECT
usergroup.attribute = seeAlso
usergroup.userFunc = tx_ldapserver->getFEGroups
usergroup.userFunc.pid = 8
}
}
}
FEgroups = LDAP_SYNC
FEgroups {
enable = 1
pid = 8
table = fe_groups
handleNotFound = 0
basedn = ou=groups,dc=domain,dc=tld
filter = (objectClass=organizationalRole)
uniqueField = tx_ldapserver_dn
fields {
username >
usergroup >
title = MAP_OBJECT
title.attribute = cn
title.userFunc = tx_ldapserver->getSingleValue
tx_ldapserver_dn = MAP_OBJECT
tx_ldapserver_dn.special = DN
}
} Fertig!
Viel Spass beim nachkochen! ;-)