upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-22 14:50:17 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 54
nextcloud/apps/user_ldap/lib
History
Roland Tapken c2d8a36d9a
user_ldap: Filter groups after nexted groups 
Currently groupsMatchFilter is called before nested groups are resolved.
This basicly breaks this feature since it is not possible to inherit
membership in a group from another group.

Minimal example:

  Group filter: (&(objectClass=group),(cn=nextcloud))
  Nested groups: enabled

  cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local
    objectClass: group

  cn=IT,ou=groups,dn=company,dn=local
    objectClass: group
    memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local

  cn=John Doe,ou=users,dn=company,dn=local
    objectClass: person
    memberOf: cn=IT,ou=groups,dn=company,dn=local

Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group
filter, John wouldn't be a member of group 'nextcloud'.

This patch fixes this by filtering the groups after all nested groups
have been collected. If nested groups is disabled the result will be the
same as without this patch.

Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
2019-03-05 11:07:35 +01:00
..
AppInfo add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
Command LDAP: extend remnants output with "detected on" field 2018-12-21 17:24:28 +01:00
Controller LDAP clear cache on config modification also when done via API or CLI 2018-12-17 00:31:27 +01:00
Exceptions add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
Handler add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
Jobs move log constants to ILogger 2018-04-26 10:45:52 +02:00
Mapping Use the defined func()->count() instead of manual counting 2018-11-08 15:44:45 +01:00
Migration Use type casting instead of *val() method 2018-01-26 11:35:42 +01:00
Notification Remove unused import statements 2018-02-14 16:55:43 +01:00
Settings [LDAP] The WebUI Wizard also should not assign empty config IDs 2018-08-23 17:58:35 +02:00
User add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
Access.php iterate over bases instead of doing parallel search 2019-01-28 23:00:59 +01:00
AccessFactory.php DI for NC's user manager 2018-04-05 12:46:24 +02:00
BackendUtility.php Fix apps/ 2016-07-21 18:13:57 +02:00
Configuration.php add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
Connection.php add LDAP ConfigHandler for external storages and "$home" var 2019-02-14 15:22:22 +01:00
ConnectionFactory.php create failing test for this case 2018-01-05 14:27:36 +01:00
FilesystemHelper.php Update comments to Nextcloud 2017-04-11 23:16:27 -05:00
Group_LDAP.php user_ldap: Filter groups after nexted groups 2019-03-05 11:07:35 +01:00
Group_Proxy.php Remove unneeded semicolon and parentheses 2018-01-26 23:46:40 +01:00
GroupPluginManager.php Update license headers 2017-11-06 16:56:19 +01:00
Helper.php Do not use \OCP\DB anymore 2018-03-26 14:40:23 +02:00
IGroupLDAP.php Update license headers 2017-11-06 16:56:19 +01:00
ILDAPGroupPlugin.php Update license headers 2017-11-06 16:56:19 +01:00
ILDAPUserPlugin.php Update license headers 2017-11-06 16:56:19 +01:00
ILDAPWrapper.php functions that were checked for are present since PHP 5.4, supported is >=/ 2018-10-25 22:50:42 +02:00
IUserLDAP.php Update license headers 2017-11-06 16:56:19 +01:00
LDAP.php avoid logging of "Partial search results returned: Sizelimit exceeded at" 2018-11-07 13:15:55 +01:00
LDAPProvider.php Update license headers 2017-11-06 16:56:19 +01:00
LDAPProviderFactory.php Update license headers 2017-11-06 16:56:19 +01:00
LDAPUtility.php Fix apps/ 2016-07-21 18:13:57 +02:00
LogWrapper.php Update comments to Nextcloud 2017-04-11 23:16:27 -05:00
Proxy.php DI for NC's user manager 2018-04-05 12:46:24 +02:00
User_LDAP.php Check if user is null before getUsername 2018-09-16 19:33:03 +02:00
User_Proxy.php Update license headers 2017-11-06 16:56:19 +01:00
UserPluginManager.php Comment fix. 2019-01-30 23:23:09 +01:00
Wizard.php move log constants to ILogger 2018-04-26 10:45:52 +02:00
WizardResult.php Fix apps/ 2016-07-21 18:13:57 +02:00