Use LDAP for attribution of a role

[Migrated From Jforum.net]

Hello,

I would like to know if an organization can use its LDAP attributs like "group A", "Group B"... to apply it to JForum Roles system. When authentifying a user from "Group A" should only see Forum "A" and a user from "Group B" should only see the forum "B".

Is it possible?

Thanks you,

Niooi
[originally posted on jforum.net by niooi]

[Migrated From Jforum.net]

No, it's not possible to interfer on JForum authentication mechanism for now.

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Thank you Rafael,

So it means LDAP is used to grant access or not to the FORUM only. How could we use JFORUM to grant access using LDAP and to add some roles to users? Should it be done manually of every and single users?

I am trying to figure out how would that be possible. We should set up Jfroum for a ministry and they already have thousands of users on LDAP.

Thank,

Yvan
[originally posted on jforum.net by niooi]

[Migrated From Jforum.net]

That's new stuff - in fact, you're the first to ask for a complete ldap role control.

In a resumed fashion, that simply can't be done at the momment, at all the security code rely on an user_id and group_id, stored in jforum_users and jforum_groups.

Of course that, if extremely necessary, that code could be changed, with some effort.

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Maybe we, my company, could contribute to implement that feature. Would you be willing to implement it if we support you?

Thanks,

Yvan
[originally posted on jforum.net by niooi]

[Migrated From Jforum.net]

Yvan, that certainly will be very good. A stronger LDAP support would be very welcome.

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

We're just installing jForum right now for internal forums within the enterprise, but we were wondering the same thing. We only have 100 people, and not thousands and we use Active Directory.

We handle roles by creating groups with the appropriate names in ActiveDirectory. If you get a version together with some functionality we'd be up for trying it out in our environment.
[originally posted on jforum.net by jrosler]

[Migrated From Jforum.net]

Any more news on extending the LDAP functionality? We're looking to implement the same...
[originally posted on jforum.net by t-readyroc]

[Migrated From Jforum.net]

No, there aren't news about this.

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Well to expand on this... What Rafael means is there is no news about "Built into JForum" support for this. However, one thing that has occurred since the this thread is the addition of the DAO architecture.

If you really want to do this, you can create some custom DAO implimentations that would map LDAP group membership into jForum. It's not a task for a novice Java programmer, but it is do-able.

If you can make it generic, then code contributions are always welcome!
[originally posted on jforum.net by monroe]