Hello,
first of all: thanks for the LDAP Testtool! It's pretty nice.
Unfortunately I still have a strange problem. OpenKM doesn't find the roles of a specific user (getRolesByUser) even though I can find these roles with ldapsearch and exactly the same inputs:
Code: Select allteststorm:/srv/openkm5 # ldapsearch -x -D "cn=admin,dc=***,dc=***,dc=de" -W -h localhost -b "ou=bcrt,dc=***,dc=***,dc=de" "(&(objectClass=inetOrgPerson)(uid=test))" memberof
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=bcrt,dc=***,dc=***,dc=de> with scope subtree
# filter: (&(objectClass=inetOrgPerson)(uid=test))
# requesting: memberof
#
# test, external, research, bcrt, ***. ***.de
dn: uid=test,ou=external,ou=research,ou=bcrt,dc=***,dc=***,dc=de
memberOf: cn=UserRole,ou=Roles,ou=okm,dc=***,dc=***,dc=de
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
teststorm:/srv/openkm5 # java -jar ./testLdap.jar getRolesByUser test
===== CONFIGURATION =====
principal.ldap.mail.attribute = mail
principal.ldap.mail.search.base = ou=bcrt,dc=***,dc=***,dc=de
principal.ldap.mail.search.filter = (&(objectclass=inetOrgPerson)(uid={0}))
principal.ldap.role.attribute = cn
principal.ldap.role.search.base = ou=Roles,ou=okm,dc=***,dc=***,dc=de
principal.ldap.role.search.filter = (objectclass=groupOfNames)
principal.ldap.roles.by.user.attribute = memberOf
principal.ldap.roles.by.user.search.base = ou=bcrt,dc=***,dc=***,dc=de
principal.ldap.roles.by.user.search.filter = (&(objectClass=inetOrgPerson)(uid={0}))
principal.ldap.security.credentials = ***
principal.ldap.security.principal = cn=admin,dc=***,dc=***,dc=de
principal.ldap.server = ldap://localhost:389
principal.ldap.user.attribute = uid
principal.ldap.user.search.base = ou=bcrt,dc=***,dc=***,dc=de
principal.ldap.user.search.filter = (objectclass=inetOrgPerson)
principal.ldap.users.by.role.attribute = member
principal.ldap.users.by.role.search.base = ou=Roles,ou=okm,dc=***,dc=***,dc=de
principal.ldap.users.by.role.search.filter = (&(objectclass=groupOfNames)(cn={0}))
====== ===== ===== ======
DEBUG com.openkm.principal.LdapPrincipalAdapter - getRolesByUser(test)
DEBUG com.openkm.principal.LdapPrincipalAdapter - ldapSearch(ldap://localhost:389, cn=admin,dc=***,dc=***,dc=de, ***, ou=bcrt,dc=***,dc=***,dc=de, (&(objectClass=inetOrgPerson)(uid=test)), memberOf)
DEBUG com.openkm.principal.LdapPrincipalAdapter - Search Result Name: uid=test,ou=external,ou=research
DEBUG com.openkm.principal.LdapPrincipalAdapter - ldapSearch: []
DEBUG com.openkm.principal.LdapPrincipalAdapter - getRolesByUser: []
Do you guys have an idea why ldapsearch finds something and the ldapTestTool doesn't?
