Redmine - Ldap Sync users and groups with ldap about redmine_ldap_sync HOT 2 CLOSED

Make sure you have the following:

Groups base DN - an ou ancestor to all the groups you want to sync
Users objectclass - user
Groups objectclass - group
Group membership - on the user class
Group name (group) - samaccountname
Groups (user) - memberof
Groupid (group) - distinguishedname

synchronization actions:
Create new groups - checked

from redmine_ldap_sync.

So – I changed the ‘groups base DN’ to OU=DevTest,OU=Chicago,DC=cmtam,DC=com. Removing the spaces appeared to make the connection work at least: at this point it went through and (incorrectly) removed all users from all groups.

I also switched the setting ‘Group membership’ from ‘On the user class’ to ‘On the group class’… and this made it work. It immediately went through and added users to the appropriate groups, exactly as is listed in LDAP. I checked adding and removing users, running the script each time, and it reflects the changes in redmine correctly.

My guess is that for some reason, it could not get a list of groups from a user. But somehow it can get a list of users from a group. It doesn’t make a lot of sense, but I don’t care. It works! The only thing I can think of is that it’s because our users and groups are in different OUs.

One other setting I changed was the group pattern, which I changed to ‘repo_.*’. This has no effect on whether or not it works; it just stops it from creating all active directory groups in OU=DevTest in Redmine. Previously, it was creating a Redmine group for Secure_RO. It doesn’t do this with the new setting as this group’s name does not begin with the string ‘repo_’.

Thank You for your prompt reply!!!

Regards

from redmine_ldap_sync.