Skip to Main Content
Idea Portal
Status In Review
Categories Functionality
Created by Thomas Johannsen
Created on Jun 29, 2023

ORGA Transmitter should read out nested groups from LDAP and make the members available as a flat group

As long as no nested groups are supported by the Doxis, the ORGA transmitter should at least have a function that groups and groups nested below them are read out of the LDAP and imported as a flat group with all members.

In LDAPv3 there is an option that can be given in the filter that outsources the work to the LDAP. This means that almost no programming effort is required.

It would be nice if the nested processing could be activated/deactivated by the user via a checkbox.

edit: It would also be useful if the function also worked for importing LDAP groups in units (Deutsch: Einheiten).

  • Attach files
  • Admin
    Ingo Gerken
    Reply
    |
    Jun 29, 2023

    Users and memberships of nested AD groups can be synchronized to Doxis users and groups by using rules/filters in OrgaTransmitter.

    If the purpose is the filtering of users that should be synchronized then it is possible to use a matching rule: <user ... filter="(memberOf:1.2.840.113556.1.4.1941:=CN=Doxis...)">.

    If the purpose is to synchronize the main groups and put there the users which are indirect members of these groups, it is possible to use memberEvaluationFilter in group element, ie. <group ... memberEvaluationFilter="...">

    2 replies