LDAP Auth and Text based roles

[phmazzoni]

Can I use LDAP for authentication AND text file based role assignment?
OR
I know I can fetch roles from LDAP, but how can I populate the roles in the OpenKM database?

[pavila]

This question is answered in this forums, please look for it.

[joebrones]

First of all I would like to praise all of the developer\'s efforts on this system.

I was quite excited to learn that OpenKM integrates with Active Directory (AD). I updated the login-config.xml file in 3.0 RC2, for Active Directory authentication. It works! Great, but I cannot configure roles.

My Questions:
Is it possible to configure the login-config.xml file to authenticate the user to AD AND then check the roles against a text file?

Also, how does OpenKM decide to place the \"admin\" user in the admin role?

Thanks for any guidance...

[pavila]

Yes, you can mix LDAP and text-based auth configuration but it is not recommended because you have to synchornize manually both modifications.

\"admin\" user is included by default in the admin role. Actually only \"admin\" user can cadministrate OpenKM.

[jllort]

\"admin\" user is the same concept than \"root\" on linux. Why we decide to only have one super user ? We think only must be a super user on OpenKM installations as we consider that must be only one authorized person - administration - to take care of OpenKM installation.