LDAP Example Rule Please

RLJB

Could someone who has LDAP for login working please provide an example of a rule used to assign Access Levels in aware?

I can't figure out how to assign an access level, I'm discovering the attributes of the LDAP fine and I can sign in fine using LDAP, but I can't figure out how I should be using the discovered attributes for access level.

How do I use someone someone being a member of a group? I think I should be using the attribute memberOf but not sure how?!?

RLJB

Just some more info, I am trying this:

If RegularUser.LDAPLINK.memberOf='CN=FRAdmin,OU=FR Groups,OU=BI Groups,DC=busi,DC=com,DC=au' Then
RegularUser.AccessLevel='Special_Admin'

and it's not working. Have also tried If RegularUser.LDAPLINK.memberOf CONTAINS

Any ideas?

Thanks

tford

The TYPE function may be useful. Where are you placing your rule? Should it refer to LoggedInRegularUser?

RLJB

Thanks Tom - you got me thinking and I solved it.

It turns out that rule above was working fine, but it needs to fire on initialization, so that the Access Level is set immediately upon the RegularUser instance being created by the LDAP plugin.

LDAP is now working for us, it works great but as is often the case with these one-off things we charged the Client about 3 hours work and it took us about 6 hours.