[Tickets #8851] Re: Groups not showing up with non flat LDAP directory

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8851
------------------------------------------------------------------------------
  Ticket             | 8851
  Updated By         | Klaus.Steinberger at Physik.Uni-Muenchen.DE
  Summary            | Groups not showing up with non flat LDAP directory
  Queue              | Horde Groupware
  Version            | 1.2.5
  Type               | Bug
  State              | No Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Klaus.Steinberger at Physik.Uni-Muenchen.DE (2010-05-19 09:38) wrote:

> I did some debugging now.
>
> Groups which are in the same level as the base DN for groups are  
> shown ( $conf[group][params][basedn] ), but any group not in the  
> same level will not be shown. Though they are appear in the source  
> text of the website frame in the n_admin_group variable.
>
> Maybe the code thinks they are subgroups, but there is no real parent group?

Yep that is it!

Some more debugging code added:

ay 19 15:26:59 HORDE [notice] [horde] Group name ls-vondelft [pid  
20114 on line 246 of "/var/www/html/horde-3.3.8/admin/groups.php"]
May 19 15:26:59 HORDE [notice] [horde] Group parent -1 [pid 20114 on  
line 254 of "/var/www/html/horde-3.3.8/admin/groups.php"]
May 19 15:26:59 HORDE [notice] [horde] Group name lsf-admins [pid  
20114 on line 246 of "/var/www/html/horde-3.3.8/admin/groups.php"]
May 19 15:26:59 HORDE [notice] [horde] Group parent 0 [pid 20114 on  
line 254 of "/var/www/html/horde-3.3.8/admin/groups.php"]

The group ls-vondelft is in ou=Gruppen,o=physik (same as base), but  
group lsf-admins is one step deeper:
ou=ou-feldmann,ou=Gruppen,o=physik

ls-vondelft is shown in the  webinterface, but group lsf-admins is not.

I think the code for subgroups should be switched off with group  
driver = LDAP.

A quick test with forcing $parent_id to -1 shows that it works then.