Issues Setting Up Group Permissions with LDAP Configuration

[Nick Antonelli]

Hello,

I've been having issues configuring permissions for groups. We are set up using LDAP for our users. Ideally I would use our pre-existing LDAP groups, yet, when I add those groups using the `cm acl` command, developers in their respective groups do not get the permissions.

When doing research, I came upon the fact that LDAP users can be added to PlasticSCM groups. I created the groups, per the documentation. Users still are not getting permissions set as intended.

My groups.conf file looks like this:

Quote

PlasticGroup1:LDAPUser1:LDAPUser2
PlasticGroup2:LDAPUser3:LDAPUser4:LDAPUser5

My server.conf as well is set up per the documentation:

Quote

<?xml version="1.0"?>
<ServerConfigData xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <Language>en</Language>
  <WorkingMode>LDAPWorkingMode</WorkingMode>
  <WorkingModeSettings>add_up</WorkingModeSettings>
  <SecurityConfig>....</SecurityConfig>
...
</ServerConfigData>

I'm not sure what is going wrong, and would appreciate any help. Thank you!

[calbzam]

Hi Nick,

Doesn't matter if you use the LDAPWorkingMode and you apply the permissions to the AD groups, or if you define custom groups and you define permissions to this groups, the permissions should be applied.

How are you applying the permissions to the groups?

How are you checking that they are actually applied?

Regards,

Carlos.

[Nick Antonelli]

Sorry for the late response! I actually ended up getting it working - I don't quite remember what I was doing wrong, but I think it was a permissions issue with my groups.conf file. I was also able to roll out the change slowly so that it didn't cause too much of an issue for the other teams. I appreciate the response :).