Skip to Content.
Sympa Menu

en - Re: [sympa-users] Problem with 2-Level LDAP Query

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: "address@concealed" <address@concealed>
  • To: Menkens Olaf <address@concealed>
  • Cc: "address@concealed" <address@concealed>
  • Subject: Re: [sympa-users] Problem with 2-Level LDAP Query
  • Date: Fri, 16 Mar 2012 13:29:45 -0400

Hello Olaf, 

Thank you so much for your quick reply. While making your recommended changes, I realized that the field that I wanted was actually memberUid. The query now works, and imports people as I was hoping it would. Just in case anyone ever needs to do something similar, I now have this:

include_ldap_2level_query
name                    sourcename
host                    localhost:389
suffix1                 ou=Subgroup,ou=Group,dc=example,dc=com
scope1                  sub
filter1                 (&(objectClass=posixGroup)(cn=[% name %]))
attrs1                  memberUid
select1                 all
#suffix2                        ou=People,dc=vaporpunk,dc=com
suffix2                 uid=[attrs1],ou=People,dc=vaporpunk,dc=com
filter2                 (objectClass=inetOrgPerson)
scope2                  base
attrs2                  mail
select2                 first


Thanks once again,
Cody

On Fri, Mar 16, 2012 at 7:18 AM, Menkens Olaf <address@concealed> wrote:

Hi Cody,

 

we use similar LDAP 2level selections and It works fine. Some hints, that might help you:

 

you should modify some lines:

 

filter2                    (objectClass=inetOrgPerson)

suffix2                  [attrs1]

scope2                 base

 

the other parameters look fine. We have an additional “name” attribute, but I guess it’s optional.

 

In our case, the configuration is in the config file of the list itself, not in contif.tt2. This looks irritating to me, but I’m not a sympa expert, so it might be OK for your setup J

 

I hope it helps.

 

Olaf.

 

Von: address@concealed [mailto:address@concealed] Im Auftrag von address@concealed
Gesendet: Freitag, 16. März 2012 04:55
An: address@concealed
Betreff: [sympa-users] Problem with 2-Level LDAP Query

 

Hello everyone,

 

I am in the process of setting up Sympa on a server, and I am working to integrate it with LDAP. Login works perfectly, but I can't get dynamic lists to work. I've poured over the documentation, but as far as I can tell, I'm doing everything properly. Here is what I have in my config.tt2:

 

include_ldap_2level_query

host                    localhost:389

suffix1                 ou=Subgroup,ou=Group,dc=example,dc=com

scope1                  sub

filter1                 (&(objectClass=posixGroup)(cn=group-name))

attrs1                  member

select1                 all

suffix2                 ou=People,dc=example,dc=com

scope2                  sub

filter2                 (&(objectClass=inetOrgPerson)(uid=[attrs1]))

attrs2                  mail

select2                 first

 

When I run sympa.pl, I don't receive any errors, but when I visit the page for the list in WWSympa, I'm told that there are no members.

 

If I try to just make everyone a member of the list, however, it works fine.

 

include_ldap_query

host                    localhost:389

timeout                 30

suffix                  ou=People,dc=example,dc=com

filter                  (objectClass=inetOrgPerson)

attrs                   mail

scope                   sub

 

I feel like this has something to do with the [attrs1] part of the 2-level LDAP query, but it looks right, and matches the documentation ( http://www.sympa.org/manual/parameters-data-sources#include_ldap_2level_query ).

 

Does anyone have an recommendations?

 

Thank you,

Cody Mello

 

 




--
    .-.
    /v\    L   I   N   U   X
   // \\  >Phear the Penguin<
  /(   )\
   ^^-^^




Archive powered by MHonArc 2.6.19+.

Top of Page