CMDBuild Forum

Request/suggestion: use groups from LDAP as Cmdbuild groups

Old Versions
#1

In the LDAP-auth-part, it would be very practical and timesaving to be able to say:

  • Allow all users to try to authenticate
  • If the password is correct, then
  • check if the user is a member of a few certain LDAP groups, then
  • map these groups to groups in Cmdbuild

We have hundreds of potential users of Cmdbuild, and they are already categorized by group memberships in LDAP. We want to say something like this in ldap,conf:

  • "unix-admins" in LDAP -> "admins" in Cmdbuild
  • "windows-admins" in LDAP -> "admins" in Cmdbuild
  • "operators" in LDAP -> "readonly" in Cmdbuild

and so on.

 

--

Ståle

#2

Ståle Askerød ha scritto:

In the LDAP-auth-part, it would be very practical and timesaving to be able to say:
  • Allow all users to try to authenticate
  • If the password is correct, then
  • check if the user is a member of a few certain LDAP groups, then
  • map these groups to groups in Cmdbuild

We have hundreds of potential users of Cmdbuild, and they are already categorized by group memberships in LDAP. We want to say something like this in ldap,conf:

  • "unix-admins" in LDAP -> "admins" in Cmdbuild
  • "windows-admins" in LDAP -> "admins" in Cmdbuild
  • "operators" in LDAP -> "readonly" in Cmdbuild

and so on.


No reply to this? This is the way in which the various lan-consoles as iDRAC from Dell and iLO from HP do their LDAP integration. Would be very handy.

 

--

Ståle

 

#3

CMDBuild currently does not include this authentication mode.
I agree that it may be useful, we include it in the CMDBuild wishlist for future versions.
Thanks
Fabio