Products.LDAPMultiPlugins 2.0

LDAP-backed plugins for the Zope2 PluggableAuthService

Products.LDAPMultiPlugins

Contents

• Products.LDAPMultiPlugins

  • Bug tracker

  • Special features - Active Directory Multi Plugin

  • Active Directory configuration hints

  • Change log

    • 2.0 (2021-10-07)

The LDAPMultiPlugins provides PluggableAuthService plugins that use LDAP as the backend for the services they provide. The PluggableAuthService is a Zope user folder product that can be extended in modular fashion using various plugins.

Bug tracker

Please post questions, bug reports or feature requests to the bug tracker at https://github.com/dataflake/Products.LDAPMultiPlugins/issues

Special features - Active Directory Multi Plugin

Properties of the ADMultiPlugin instance:

• groupid_attr - the LDAP attribute used for group ids.

• grouptitle_attr - the LDAP attribute used to compose group titles.

• group_class - the LDAP class of group objects.

• group_recurse - boolean indicating whether to determine group memberships of a user by unrolling nested group relationships (expensive). This feature is not guaranteed to work at this moment.

Active Directory configuration hints

In order for groups support to work correctly, you may have to set the following properties. Every situation is different, but this has helped some people succeed:

• On the “Properties” tab for the ActiveDirectoryMultiPlugin, set the groupid_attr property to “name”.

• On the contained LDAPUserFolder’s “Configure” tab, choose a property other than “objectGUID”, e.g. “sAMAccountName” for the User ID property. To get to the LDAPUserFolder, click on the ActiveDirectoryMultiPlugin “Content” tab.

Please see README.ActiveDirectory from the LDAPUserFolder package for additional information.

---

Change log

To see earlier changes please see HISTORY.txt.

2.0 (2021-10-07)

• Major packaging cleanups

• Redo version pins to stay on Zope 2

• Switched documentation to point to the new Git repository

• Refactoring: Moved documentary text files into egg root

• Bug: Demangling user prefix could not deal with non-string user ids, which may appear in certain cases. (https://bugs.launchpad.net/bugs/586931)

• Bug: Added GenericSetup magic to fully provide the INode interface for the exporter and importer classes, making it easier to nest within other importers. (https://bugs.launchpad.net/bugs/586500)

• Bug: enumerateUsers returned undesired results if an exact match was required since LDAP searches are not case sensitive. (https://bugs.launchpad.net/bugs/585901)