Home / server / Questions / 199296
Accepted
Hubert Kario
Asked: 2010-11-09 01:30:32 +0800 CST

rfc2307bis and posix groups

  • 772

I've needed to configure LDAP authentication for Joomla! and the only way to get it to work together (with LDAP group based was by using groupOfUniqueNames, not the posixGroup. In other words, Joomla expects LDAP to follow the RFC2307bis schema.

This beg the question: do other LDAP using applications understand the RFC2307bis schema?

From what I could find, the 4 most important applications do:

  • pam_ldap and nss_ldap
  • Samba
  • Gosa
  • phpLDAPAdmin

Besides that, what is the state of general support for this schema (Apache auth, squid, groupware suites, freeradius)?

Any problems with such configuration (rfc2307bis, pam_ldap, nss_ldap and samba)?

ldap openldap groups

1 Answers

  1. Best Answer

    From what GOsa² developers said, they are using modified RFC2307 schema that not only uses groupOfUniqueNames as @SergeyVlasov noted is standard in second draft, but also duplicate the regular NIS schema giving full backwards compatibility (as long as one doesn't use other administrative tools for changing group membership or user creation).

    I haven't tried it yet, but it looks like one can use this modified schema without problems.

    • 1