Summary

Usage

 
LDAPGroupMappingType= UseGroupAttribute | SimpleMapping | GetGroupsTree

Description

This setting sets the LDAP group mapping type.
Possible values are: UseGroupAttribute, SimpleMapping an GetGroupsTree

• UseGroupAttribute: this is the old style group assignment which uses the LDAPUserGroupAttribute setting.
  This mode requires that group membership is specified in the LDAP user object, i.e. the user object contains an attribute specifying the groups.
  When using this value also check the setting LDAPCreateMissingGroups in block [LDAPSettings].
  When using this value in combination with the LDAPUserGroupAttributeType setting set to 'dn', you should also check the setting LDAPGroupNameAttribute in block [LDAPSettings]
• SimpleMapping: this uses the LDAPUserGroupMap array for name-to-name group mapping.
  This mode requires that group membership is specified in the LDAP group object, i.e. the group object contains an attribute specifying the users that are members.
  When you use this, you must also set LDAPGroupClass, LDAPGroupNameAttribute, LDAPGroupMemberAttribute, and LDAPUserGroupMap in block [LDAPSettings]
• GetGroupsTree: this uses the automatic name-to-name group mapping, which creates groups as needed.
  This mode requires that group membership is specified in the LDAP group object, i.e. the group object contains an attribute specifying the users that are members.
  When you use this, you must set LDAPGroupClass, LDAPGroupNameAttribute and LDAPGroupMemberAttribute in block [LDAPSettings].

For more information and examples on LDAP group mapping type please visit the chapter LDAP group mapping type

This setting is case sensitive

Examples

LDAPGroupMappingType=UseGroupAttribute

This is the default setting.