nextcloud / nextcloud/ldap_write_support

Add group template to settings

Open
#446 0 comments 3 reactions 0 assignees View on GitHub

@blizzz is already working on this.

Since Oct 19, 2020.

  • #219 by @blizzz — open
Dominant language
PHP
Stars
33
Forks
14
Avg merge
1d 4h
Merged PRs (30d)
13

Description

Hi, and thanks for the plugin!

Although it has its limitations - what plugin doesn't have - it is fairly usable.
The biggest issue for me (besides everything related to placeholders vs API deficiencies as described in https://github.com/nextcloud/ldap_write_support/issues/122) is group creation.

I use this schema for Nextcloud's user and group objects. Furthermore I add uidObject objectClass to all groups, so they have uid field, which is used in their dn. This makes the following Nextcloud LDAP configuration possible:

  • I filter LDAP groups in Nextcloud based on objectClass=NextcloudGroup
  • I set groups' displayName to cn, which possibly contain non-ASCII chars (as I manage a Nextcloud instance for Hungarian members)
  • I set groups' UUID to uid which is all lowercase ASCII (and practically the English equivalent of displayName-giving cn)

Now, group creation with this setup - obviously - fails.
Groups created through Nextcloud are added to LDAP, but they are not found and parsed back (Nextcloud reports group creation failed) because:

  • they don't get the NextcloudGroupobjectclass
  • they don't get the uidObject objectclass, so they cannot get the uid attribute, even if creation would take my LDAP group UUID settings into account.
    This could be mostly fixed with a similar template editor as given for user creation.
    I'd add these two objectClasses to the template, set uid and cn to groupName supplied by Nextcloud. I'd still have to change cn in LDAP later, but the non-technical board members of the NPO (for which this Nextcloud is set up) could create the groups without me, and I could "re-displayName" them when I have the time...

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review open pull request #219 first, then compare the requested group support with the existing user-creation template editor mentioned in the issue. Confirm that group creation can supply the requested objectClasses and groupName-derived uid and cn values, and verify the resulting groups are found and parsed by Nextcloud.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.