From 8f6c4a3d88568c1a9e247c841a7b32746dc5310d Mon Sep 17 00:00:00 2001 From: Ralf Becker Date: Thu, 21 Jun 2007 08:58:15 +0000 Subject: [PATCH] "added note about newer openLDAP with hardcoded uid/gidNumber attribute" --- phpgwapi/doc/ldap/README | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/phpgwapi/doc/ldap/README b/phpgwapi/doc/ldap/README index ef07de774a..0c5b3dc337 100644 --- a/phpgwapi/doc/ldap/README +++ b/phpgwapi/doc/ldap/README @@ -32,9 +32,25 @@ or alternativly edit my.ldif by hand: Please note: ----------- -You can use nis2rfc2307bis.php on newer SuSE distros too, to get groupOfNames and the member -attributes set, without editing & saving each group in Admin >> Manage groups. - +a) You can use nis2rfc2307bis.php on newer SuSE distros too, to get groupOfNames and the member + attributes set, without editing & saving each group in Admin >> Manage groups. + +b) Newer openLDAP servers already have uidNumber and gidNumber hardcoded. You have to comment out + the definition of them in the rfc2307bis.schema file: + +# disable to accomodate for newer openLDAP servers, which have these values hardcoded +#attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber' +# DESC 'An integer uniquely identifying a user in an administrative domain' +# EQUALITY integerMatch +# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 +# SINGLE-VALUE ) +# +#attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber' +# DESC 'An integer uniquely identifying a group in an +# administrative domain' +# EQUALITY integerMatch +# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 +# SINGLE-VALUE ) eGroupWare detects if it can use groupOfNames together with posixGroup and fills the member attribute, if you edit the group or changes the members.