Forum GLPI-Project

Fed37

Member

Registered: 2023-03-11

Posts: 1

[GLPI 10.0.3] Problem with a dynamic group from LDAP server

Hi,

I contact you because I have a problem with the one dynamic group from LDAP I have on GLPI 10.0.3.

All GLPI's users are in a LDAP group and when they log into GLPI, the group automatically remove from the user's profile...

I must force a synchronization on the users in order to the group appears again on the user's profile.

The group is removed at every user's connection.

I don't know why, i've try to search the reason but I didn't found it.

Can someone help me please ? Have you an idea ??

Thanks in advance,

Kinds Regards

tofou

Member

From: Saint-Lô

Registered: 2007-02-26

Posts: 96

Re: [GLPI 10.0.3] Problem with a dynamic group from LDAP server

Hello,
Same problem with LDAP Server (389 Directory Server).
It seems that when login, the informations (groups and fields) are taken from LDAP Server with the user session logged on LDAP.
Otherwise, when synchronize, the information are taken with root_dn user parameters which has certainly more access on LDAP Server than the user.
I have'nt found any solution yet...
Regards

---

GLPI : 10.0.16
OS : RH9 + Apache
php : 8.3.11,
MariaDB : 10.11.9

cconard96

Moderator

Registered: 2018-07-31

Posts: 2,813

Website

Re: [GLPI 10.0.3] Problem with a dynamic group from LDAP server

Your users don't have permission to see their own group memberships?
Maybe this could be reported on GitHub as a bug. I guess the initial connection should still be done with the user credentials to validate the password, but a second connection should be made with the root_dn for the rest of the process.

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.

tofou

Member

From: Saint-Lô

Registered: 2007-02-26

Posts: 96

Re: [GLPI 10.0.3] Problem with a dynamic group from LDAP server

Hi Curtis,
I made this post (in french) to describe the situation and the "temporary" solution.
Regards

Last edited by tofou (2024-07-26 11:17:19)

---

GLPI : 10.0.16
OS : RH9 + Apache
php : 8.3.11,
MariaDB : 10.11.9