LDAP AD bridge and read permissions

susanh · June 28, 2007, 12:08pm

Hi,

We would like to limit access to a page to some organisational units within our LDAP AD bridge. However when I change the permissions on the page concerned using Permissions > Read > Change & selecting the OU the authentication works (User xxxx is currently logged on) but gets an error "You do not have permission to access…". What am I doing wrong?

Thanks in advance,

Susan

Daniel_Nitsche · June 28, 2007, 1:24pm

Is the page live? Read permission does not include read access to non-live assets (eg. Under Construction).

gsherwood · June 28, 2007, 9:54pm

Also make sure the memberOf attribute for the user lists that OU so Matrix knows they are part of that group.

Avi_Miller · June 28, 2007, 11:28pm

Will the OU show up in this attribute? In Active Directory, it doesn't -- I thought Matrix implied group membership to OUs though.

gsherwood · June 29, 2007, 12:06am

It shows up in AD, but not in OpenLDAP dirs we have seen. So we use OU in the user's DN for non-AD systems.

Avi_Miller · June 29, 2007, 12:16am

Ok, cool.

susanh · July 2, 2007, 10:18am

Thanks - it's fixed now. I needed to use the group rather than the OU to get this working.

Susan

Avi_Miller · July 2, 2007, 11:29am

Remember that in MySource Matrix v3.12 (at least, perhaps even in v3.10, but I'm not 100% sure on that) you can link LDAP users into MySource Matrix groups. This could make it even easier to manage group membership for your users.