Products.PASGroupsFromLDAP 1.2.3

Description:

Products.PASGroupsFromLDAP 1.2.3

This PAS plugin let you connect to some LDAP-Server. We’ve tested it with
OpenLDAP, Apples OpenDirectory and Microsoft Active Directory.
Groups are read-only, so you cant add new groups from Plone into LDAP. This may
be added optional in future.
You dont need any mapping like in LDAPMultiPlugins. It just take all groups from
the DN you search in. You can use PASGroupsFromLDAP together with
LDAPMultiPlugins. But ensure to disable all group related plugins of
LDAPMultiPlugins.
PASGroupsFromLDAP is a multi-plugin supporting the interfaces:

IGroupsPlugin (from PluggableAuthService, short PAS)
IGroupEnumerationPlugin (from PAS)
IGroupIntrospection (from PlonePAS)
IPropertiesPlugin (from PAS)


Installation
Latest release or subversion needs those steps:

make sure you have python-ldap installed, for example on Debian based OS
sudo apt-get install python-ldap or include it into your buildout.
using buildout, add Products.PASGroupsFromLDAP to the eggs sections of
your zope instance.
portal_setup or quickinstaller and install it.
in ZMI YOURPLONE/acl_users/groups_from_ldap/manage you can change LDAP
settings
go to the IPropertiesPlugin configuration and make sure
groups_from_ldap is on the top.



Update from oldschool product to egg:
In case you need to upgrade an zope instance using an old, non-eggified version,
of this module you need to fix your zope like so:

Start zope in debug mode:
>>> app['Control_Panel']['Products'].manage_delObjects(['PASGroupsFromLDAP'])
>>> import transaction()
>>> transaction.commit()

Restart zope
Delete PASGroupsFromLDAP plugin from you acl_users.
Re-create the plugin.



TODO

Cleanup adding / editing of the plugin.
Do not add a default groups_from_ldap object due setuphandler



Changes

1.2.3
Added a configureable property that points on the user attribute to be matched
for group lookups (gogo).

1.2.2
require version of bda.ldap with configure.zcml and include configure.zcml
(ldr)

1.2.1
Fix the sometimes weird adding and edit mechanisms (rnix - 2009-03-10).

1.2.0
Write ZMI add form for plugin. Nobody missed it yet?? (rnix - 2009-03-10)

1.1.2
Document update procedure (rnix - 2009-03-10)

1.1.1
set p_changed True after managing configuration. This bug was never detected
since the LDAP Session itself was previously persisted in the plugin.
(rnix - 2009-02-16)

1.1
Fix ldap property on plugin object due to changes in bda.ldap.
(rnix - 2009-02-10)

1.1 and before
Initial work.




Copyright
Authors:

Jens Klein <[email protected]>
Robert Niederreiter <[email protected]>
Georg Gogo. Bernhard <[email protected]>

Copyright (C) 2007-2010 BlueDynamics Alliance, Austria
License: GNU General Public License Version 2.