[horde] Listing users

Jan Schneider jan at horde.org
Mon Jun 26 09:49:54 UTC 2017


Zitat von Andriy Kopystyansky <anri at polynet.lviv.ua>:

> Hi people, dear developers,
> I'm using Horde-6.0.0-git with IMP, nag, mnemo _and Wicked_ and I've  
> stuck with some problem concerning user auth backend and listing  
> those users.
> The problem is as follows:
> Whereas I'd like to use "Groups" to oganize some special access  
> rights for Wicked - I have to use LDAP as auth backend.
> There are over 4k users in my LDAP. So, keeping ldap-filter wide  
> enough to allow all of them to log in and use mail/tasks/whatever, I  
> realized, i actually cannot manage Groups/permissions because:
> 1) users, displayed in the drop-down/list are shown as Full Names  
> set in their Identities (it is unreal or at least uncertain to guess  
> which one belongs to whom - consider 4k...) Is it possible somehow  
> to display users by theirs UID (maybe some hook)?

Honestly, with a user list this large, you probably don't want to show  
the list at all. Besides the bandwidth it consumes, such a long drop  
down list is also going to slow down the user browsers and devices.
You can turn this off in the authentication configuration.

> 2) I suppose, in practice, the need of constructing some  
> sophisticated access groups is limited by certain ldap container  
> (e.g. ou=stuff,o=company) while all the rest access is allowed for  
> every authenticated user. So, it would be nice to have separate  
> ldap-filter for displaying users/creating groups. I really feel  
> guilty when retrieving all 4k users from LDAP...

Groups *are* completely different from user listing, so I'm not quite  
sure what your problem is. You could even have separate backends for  
authentication and groups, so I fail to see how listing users has  
anything to do with using LDAP groups.

-- 
Jan Schneider
The Horde Project
https://www.horde.org/



More information about the horde mailing list