Please login or register to participate.
mdebus Dec 28, 2009 03:37 PM
I get no cn=fullname mapping when using OpenLDAP. I used the instructions in [[microsoft-active-directory-services-integration]], have done the schema mapping but no mappings seem to work. I can login fine. But don't have fullnames, mail addresses, etc. Any idea?
Replies (6)
dhiraj Dec 29, 2009 09:22 AM
Hmm.... did you check that the LDAP property enumeration plugin is ordered *before* the other plugins in acl_users? That's the usual cause for this, even with MS AD. Also, when you change the ordering remember to flush the caches in the LDAP plugin's Caches tab. You should also logout and log back in after changing this, or flushing caches.

Lastly, are your schema and attribute names correct? Can you verify with some other tool / software that it picks up the mapping properly? Also, try and use an AD explorer to figure out accurate schema names.

If you've done all this then it might well be a genuine issue, will have to check it out. Will have to set up an OpenLDAP here, first, that's the primary reason we don't have a how-to on it, yet. :)
mdebus Dec 29, 2009 03:24 PM
You mean in acl_users/plugins/"Properties Plugins"?

I've done this but no go. :( I flushed the cache and have done a relogin.

My LDAP is working fine otherwise. All users are correctly displayed in Zope.

OpenLDAP: Go for it! :)
mdebus Dec 29, 2009 04:00 PM
Ha, forget it! After a restart of Zope everything works! Thanks!
dhiraj Dec 30, 2009 08:20 AM
Cool! So it's working now?
Hmm... restart required, eh? Would love it if you could put down a few points about the differences between "normal" MS AD and OpenLDAP in the how-to Wiki page, here:[…]/openldap-integration

Is the only difference between the 2 Directory Servers, just the adding of the different plugin depending on whether you're using MS AD or not? Or are there more changes?
mdebus Jan 07, 2010 10:30 PM
Happy new year, Dhiraj! I'm back. :)

I've set up the whole thing again. No restart required. It seems there was some kind of caching.

I'll write some more Wiki stuff in a few days. Pretty busy ATM.

There is in fact no difference between AD and OpenLDAP - only the different plugin. I was just following your AD guide just fine.
dhiraj Jan 12, 2010 10:41 PM
Hey cool! I'll make a note of this. So the same guide can be re-used. Neat! :)