[Building Sakai] LDAP + auth

[Steve Swinsburg]

Hi Daniel,

Users that come from an external provider can still create sites. It's to do with the user type they are given and whether or not that user has the appropriate permission (site.add I believe). In your LDAP mapping you can use one of the UserTypeMapper beans to assign a Type to them. You can use the StringUserTypeMapper to give everyone the same type, or map an attribute from LDAP to give them an appropriate Type. So long as the !user.template.TYPE realm has the right permission, they can create sites.

cheers,
Steve


you can use the
On 01/12/2009, at 9:25 AM, Daniel Lind wrote:

> Hi!
> 
> I'm trying to integrate an LDAP mapping for user data lookup when adding users to a site in Sakai 2.6.0. It works fine, but then that added user is a "provided" user which are not allowed to create sites etc. I would like to lookup users from an LDAP, but when they are added they will be local users inside Sakai. Is this possible?
> 
> I'm trying like this when a user login with shibboleth to update the user credentials in Sakai:
> 
> 1. user = userdirectoryservice.getUserByEid(eid);   <- OK the user is found from LDAP lets try to update the user data (email, name). 
> 2. edituser = userdirectoryservice.editUser(user.getId());     <- no can do: the user is not defined! Then I try to add it.
> 3. userdirectoryservice.addUser(null, eid, ...      <- no can do: the user is already defined!
> 
> 
> Is there an LDAP setting I've missed that lets the provided users from an LDAP be stored locally as internal user instead of provided ones?
> 
> Thanks in advance!
> 
> Regards,
> Daniel Lind
> 
> ------------------------------------------
> Daniel Lind
> UMDAC, Umeå universitet
> 901 87 Umeå Telefon: +46 90 786 53 12
> Daniel.Lind at umdac.umu.se
> ------------------------------------------
> 
> 
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"