Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32908

Make dynamicAttributeId optional in LDAP configuration

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: 2023.x, 2025.x
    • Component/s: Configuration

      Description

      Under certain circumstances (to be determined), the presence of dynamicAttributeId="memberURL" in the LDAP configuration makes the reference search fail.

      We could add a condition to make this part optional in the template templates/common/config/default-ldap-users-directory-bundle.xml.nxftl

      <#if "${nuxeo.ldap.group.mapping.members.dynamicAttributeId.enabled}" == "true">
<ldapReference field="members" directory="ldapUserDirectory"
 forceDnConsistencyCheck="false" staticAttributeId="${nuxeo.ldap.group.mapping.members.staticAttributeId}"
 dynamicAttributeId="${nuxeo.ldap.group.mapping.members.dynamicAttributeId}" />

<ldapReference field="subGroups" directory="ldapGroupDirectory"
 forceDnConsistencyCheck="false" staticAttributeId="${nuxeo.ldap.group.mapping.members.staticAttributeId}"
 dynamicAttributeId="${nuxeo.ldap.group.mapping.members.dynamicAttributeId}" />
<#else>
<ldapReference field="members" directory="ldapUserDirectory"
 forceDnConsistencyCheck="false" staticAttributeId="${nuxeo.ldap.group.mapping.members.staticAttributeId}" />
<ldapReference field="subGroups" directory="ldapGroupDirectory"
 forceDnConsistencyCheck="false" staticAttributeId="${nuxeo.ldap.group.mapping.members.staticAttributeId}" />
</#if>

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              tmartins Thierry Martins
              Participants:
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: