You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@manifoldcf.apache.org by "Karl Wright (JIRA)" <ji...@apache.org> on 2014/01/17 02:19:23 UTC

[jira] [Commented] (CONNECTORS-857) SharePoint/AD authority connector returns user SID but not group SIDs

    [ https://issues.apache.org/jira/browse/CONNECTORS-857?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13874263#comment-13874263 ] 

Karl Wright commented on CONNECTORS-857:
----------------------------------------

Client indicates that tokenGroups field is null for most users, but *some* users have correct values.  This argues that the problem is an AD setup issue of some kind.  So I'm going to (tentatively) resolve this ticket, and hope that the setup issue gets resolved without code changes on our side.


> SharePoint/AD authority connector returns user SID but not group SIDs
> ---------------------------------------------------------------------
>
>                 Key: CONNECTORS-857
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-857
>             Project: ManifoldCF
>          Issue Type: Bug
>          Components: SharePoint connector
>    Affects Versions: ManifoldCF 1.5
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>             Fix For: ManifoldCF 1.5
>
>
> The SharePoint AD authority connector is reportedly returning user SIDs but not SIDs for those groups that the user belongs to.  This is despite the code being identical in regard to the Active Directory authority connector.
> It's not clear whether the code has a simple logic bug, or whether Microsoft changed their LDAP schema in some subtle way which breaks this functionality.  It seems like maybe you were always supposed to use the attribute name "Token-Groups" rather than "tokenGroups"?  See this article:
> http://msdn.microsoft.com/en-us/library/windows/desktop/ms680275%28v=vs.85%29.aspx



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)