sync-ldap-groups-to-svn-authz icon indicating copy to clipboard operation
sync-ldap-groups-to-svn-authz copied to clipboard

Nested groups not taken in mind

Open whitlockjc opened this issue 8 years ago • 2 comments

"Simply remove line 189: elif (len(user) > 1): I suppose that len(user) with nested groups returns 0 Cheers, Vassil Vassilev"

Do not remove line 189, just reverse > to <.

whitlockjc avatar Nov 15 '15 03:11 whitlockjc

I'm using the following properties:

group_query = "objectClass=groupOfNames" group_member_attribute = "member" user_query = "objectClass=posixAccount" userid_attribute = "uid"

Group RDN's are 'CN's.

The user = query at the top of create_group_model lists but does not recurse the nested groups in my case.

Changing line 188 from elif (len(user) > 1): to elif (len(user) != 1): fixes recursive group checking in my case.

whitlockjc avatar Nov 15 '15 03:11 whitlockjc

I'm facing the same issue even with the latest checkout. I would like to retrieve all the groups (nested DLS) from the parent DL (CN=ABC,OU=Users-DistributionGroups,DC=mycompany,DC=com).

When executing the script, all the nested DLs as shown in the warnings as below -

[WARNING]: subgroup not in search scope: CN=Sub-of-ABC,OU=Users-DistributionGroups,DC=mycomany,DC=com. This means you won't have all members in the SVN group: ABC.

How do I get all the groups inside a group (nested DLs of a DL) using this script? I was not able to retrieve complete DLs in my Org, because of the size limit errors (Error performing search: {'desc': 'Size limit exceeded'}).

mneeharika avatar Jul 10 '18 09:07 mneeharika