whitlockjc / sync-ldap-groups-to-svn-authz

Simple Python script that can take your LDAP group definitions and create a Subversion authz file equivalent.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Nested groups not taken in mind

whitlockjc opened this issue · comments

"Simply remove line 189: elif (len(user) > 1): I suppose that len(user) with nested groups returns 0 Cheers, Vassil Vassilev"

Do not remove line 189, just reverse > to <.

I'm using the following properties:

group_query = "objectClass=groupOfNames" group_member_attribute = "member" user_query = "objectClass=posixAccount" userid_attribute = "uid"

Group RDN's are 'CN's.

The user = query at the top of create_group_model lists but does not recurse the nested groups in my case.

Changing line 188 from elif (len(user) > 1): to elif (len(user) != 1): fixes recursive group checking in my case.

I'm facing the same issue even with the latest checkout. I would like to retrieve all the groups (nested DLS) from the parent DL (CN=ABC,OU=Users-DistributionGroups,DC=mycompany,DC=com).

When executing the script, all the nested DLs as shown in the warnings as below -

[WARNING]: subgroup not in search scope: CN=Sub-of-ABC,OU=Users-DistributionGroups,DC=mycomany,DC=com. This means you won't have all members in the SVN group: ABC.

How do I get all the groups inside a group (nested DLs of a DL) using this script? I was not able to retrieve complete DLs in my Org, because of the size limit errors (Error performing search: {'desc': 'Size limit exceeded'}).