Win a copy of Fixing your Scrum this week in the Agile forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Ron McLeod
  • Paul Clapham
  • Rob Spoor
  • Liutauras Vilda
Sheriffs:
  • Jeanne Boyarsky
  • Junilu Lacar
  • Tim Cooke
Saloon Keepers:
  • Tim Holloway
  • Piet Souris
  • Stephan van Hulst
  • Tim Moores
  • Carey Brown
Bartenders:
  • Frits Walraven
  • Himai Minh

Use LDAP for attribution of a role

 
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hello,

I would like to know if an organization can use its LDAP attributs like "group A", "Group B"... to apply it to JForum Roles system. When authentifying a user from "Group A" should only see Forum "A" and a user from "Group B" should only see the forum "B".

Is it possible?

Thanks you,

Niooi
[originally posted on jforum.net by niooi]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
No, it's not possible to interfer on JForum authentication mechanism for now.

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Thank you Rafael,

So it means LDAP is used to grant access or not to the FORUM only. How could we use JFORUM to grant access using LDAP and to add some roles to users? Should it be done manually of every and single users?

I am trying to figure out how would that be possible. We should set up Jfroum for a ministry and they already have thousands of users on LDAP.

Thank,

Yvan
[originally posted on jforum.net by niooi]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
That's new stuff - in fact, you're the first to ask for a complete ldap role control.

In a resumed fashion, that simply can't be done at the momment, at all the security code rely on an user_id and group_id, stored in jforum_users and jforum_groups.

Of course that, if extremely necessary, that code could be changed, with some effort.

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Maybe we, my company, could contribute to implement that feature. Would you be willing to implement it if we support you?

Thanks,

Yvan
[originally posted on jforum.net by niooi]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Yvan, that certainly will be very good. A stronger LDAP support would be very welcome.

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
We're just installing jForum right now for internal forums within the enterprise, but we were wondering the same thing. We only have 100 people, and not thousands and we use Active Directory.

We handle roles by creating groups with the appropriate names in ActiveDirectory. If you get a version together with some functionality we'd be up for trying it out in our environment.
[originally posted on jforum.net by jrosler]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Any more news on extending the LDAP functionality? We're looking to implement the same...
[originally posted on jforum.net by t-readyroc]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
No, there aren't news about this.

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Well to expand on this... What Rafael means is there is no news about "Built into JForum" support for this. However, one thing that has occurred since the this thread is the addition of the DAO architecture.

If you really want to do this, you can create some custom DAO implimentations that would map LDAP group membership into jForum. It's not a task for a novice Java programmer, but it is do-able.

If you can make it generic, then code contributions are always welcome!
[originally posted on jforum.net by monroe]
 
I've got no option but to sell you all for scientific experiments. Or a tiny ad:
the value of filler advertising in 2021
https://coderanch.com/t/730886/filler-advertising
reply
    Bookmark Topic Watch Topic
  • New Topic