[horde] Listing users
Jan Schneider
jan at horde.org
Mon Jun 26 09:49:54 UTC 2017
Zitat von Andriy Kopystyansky <anri at polynet.lviv.ua>:
> Hi people, dear developers,
> I'm using Horde-6.0.0-git with IMP, nag, mnemo _and Wicked_ and I've
> stuck with some problem concerning user auth backend and listing
> those users.
> The problem is as follows:
> Whereas I'd like to use "Groups" to oganize some special access
> rights for Wicked - I have to use LDAP as auth backend.
> There are over 4k users in my LDAP. So, keeping ldap-filter wide
> enough to allow all of them to log in and use mail/tasks/whatever, I
> realized, i actually cannot manage Groups/permissions because:
> 1) users, displayed in the drop-down/list are shown as Full Names
> set in their Identities (it is unreal or at least uncertain to guess
> which one belongs to whom - consider 4k...) Is it possible somehow
> to display users by theirs UID (maybe some hook)?
Honestly, with a user list this large, you probably don't want to show
the list at all. Besides the bandwidth it consumes, such a long drop
down list is also going to slow down the user browsers and devices.
You can turn this off in the authentication configuration.
> 2) I suppose, in practice, the need of constructing some
> sophisticated access groups is limited by certain ldap container
> (e.g. ou=stuff,o=company) while all the rest access is allowed for
> every authenticated user. So, it would be nice to have separate
> ldap-filter for displaying users/creating groups. I really feel
> guilty when retrieving all 4k users from LDAP...
Groups *are* completely different from user listing, so I'm not quite
sure what your problem is. You could even have separate backends for
authentication and groups, so I fail to see how listing users has
anything to do with using LDAP groups.
--
Jan Schneider
The Horde Project
https://www.horde.org/
More information about the horde
mailing list