Alias Groups

Issue #1056 closed
Yousif Redeemer created an issue

Hello,

First i want to thank you for this great archive solution.

I have a problem with alias groups,

I use Freeipa for my users and i have groups which contains multiple users.

the issue is that in Piler the emails coming for the group is not visible.

I’ve seen other issues about this problem and i understood that the ldap configuration will solve it, but in my case it did not work.

This is my ldap Configuration.

\$config['ENABLE_LDAP_AUTH'] = 1;
\$config['LDAP_HOST'] = '192.168.1.20';
\$config['LDAP_PORT'] = 389;
\$config['LDAP_HELPER_DN'] = 'uid=user,cn=users,cn=accounts,dc=example,dc=com';
\$config['LDAP_HELPER_PASSWORD'] = 'Password';
#$config['LDAP_MAIL_ATTR'] = 'mail';
\$config['LDAP_AUDITOR_MEMBER_DN'] = '';
\$config['LDAP_ADMIN_MEMBER_DN'] = '';
\$config['LDAP_BASE_DN'] = 'cn=accounts,dc=example,dc=com';

// AD specific settings
//
\$config['LDAP_ACCOUNT_OBJECTCLASS'] = 'person';
\$config['LDAP_DISTRIBUTIONLIST_OBJECTCLASS'] = 'posixgroup';
\$config['LDAP_DISTRIBUTIONLIST_ATTR'] = 'memberOf';
\$config['LDAP_MAIL_ATTR'] = 'mail';

and this the log when i login in my user

Mar 10 08:04:16 piler piler-webui[32682]: ldap query: base dn='cn=accounts,dc=example,dc=com', filter='(&(objectClass=person)(mail=user1@example.com))', attr='', 1 hits
Mar 10 08:04:16 piler piler-webui[32682]: ldap auth against '192.168.1.20', dn: 'uid=user,cn=users,cn=accounts,dc=example,dc=com', result: 1
Mar 10 08:04:16 piler piler-webui[32682]: ldap query: base dn='cn=accounts,dc=example,dc=com', filter='(|(&(objectClass=person)(mail=user1@example.com))(&(objectClass=posixgroup)(memberOf=user1@example.com))(&(objectClass=posixgroup)(memberOf=uid=user1,cn=users,cn=accounts,dc=example,dc=com)))', attr='', 1 hits
Mar 10 08:04:16 piler piler-webui[32682]: username=user1@example.com, event='logged in', ipaddr=192.168.1.100

Comments (10)

  1. Yousif Redeemer reporter

    it contains users which are , user1,user2,user3,user4 and user5

    and the group name which user1 is part of is cn=it,cn=groups=cn=accounts,dc=example,dc=com

  2. Janos SUTO repo owner

    I asked you to show me the ldap attributes (think of an ldif file) of such group. If it’s not ok to share, then case is closed. If it contains sensitive info, then send me in a private message.

  3. Yousif Redeemer reporter

    dn: cn=it,cn=groups,cn=accounts,dc=example,dc=com
    modifyTimestamp: 20200315164419Z
    ipaUncomueID: 6ac9435e-8f46-11e9-b3e4-001a4a260304
    createTimestamp: 20190615082021Z
    creatorsName: uid=admin,cn=users,cn=accounts,dc=example,dc=com
    cn: it
    gidNumber: 1663802440
    member: uid=user1,cn=users,cn=accounts,dc=example,dc=com
    member: uid=user2,cn=users,cn=accounts,dc=example,dc=com
    member: uid=user3,cn=users,cn=accounts,dc=example,dc=com
    member: uid=user4,cn=users,cn=accounts,dc=example,dc=com
    member: uid=user5,cn=users,cn=accounts,dc=example,dc=com
    objectClass: ipaobject
    objectClass: top
    objectClass: customAttributesDept
    objectClass: customAttributes
    objectClass: ipausergroup
    objectClass: posixgroup
    objectClass: groupofnames
    objectClass: nestedgroup
    description: IT
    nsUncomueId: 5e0e7fcd-8f4611e9-b329fbb5-6cd31f59

  4. Janos SUTO repo owner

    Thank you. I can see the members' dn values, however, I can’t see the actual group address. Where is it?

  5. Yousif Redeemer reporter

    Thanks for your quick reply.

    It’s dn: cn=it,cn=groups,cn=accounts,dc=example,dc=com

  6. Janos SUTO repo owner

    It’s not an email address, that’s why the ldap result parser can’t find the group address. So where’s the email address?

  7. Yousif Redeemer reporter

    Unfortunately , i don’t have an attribute for the email in the groups , i will try to find a work around

  8. Log in to comment