[Owncloud] Users LDAP storage related issues

Aleksander Machniak machniak at kolabsys.com
Tue Feb 28 13:27:36 UTC 2012


While configuring ownCloud to use LDAP as user database we've found a
lot of issues with sharing and LDAP. Here are some thoughts. We've made
tests two months ago using git version, so maybe something's changed
since then?

- Authenticating against LDAP does not create the owncloud equivalent of
a user account, and therefore sharing with permissions is not working,
- It's referring to group members by uid instead of oc_users.id, so name
changes become difficult,
- It's referring to groups by gid instead of oc_groups.id
(it doesn't have an id field for oc_groups nor oc_users tables, in fact)
the oc_principals table is also referring to the uid text instead of the
local account id,
- It should use the user's bind credentials, and not the service bind
credentials,
- It attempts to create a full list of usernames for auto-completion,
which it shouldn't do for lists of usernames can get rather large.

-- 
Aleksander 'A.L.E.C' Machniak
LAN Management System Developer [http://lms.org.pl]
Roundcube Webmail Developer  [http://roundcube.net]
---------------------------------------------------
PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl



More information about the Owncloud mailing list