Use uidNumber as memberUid attribute

[ebogaard]

At the moment we set ldap.synchronization.groupMemberAttributeName to memberUid and put the full dn as the value.
AS we have some transformations in our ldap ahead, that will make management of all those dn's a little difficult.

It would be nice to be able to use the uidNumber as a groupmember attribute, which is a constant and unique number ldap can use to lookup the right user.
As we currently use the mail attribute as the loginname (ldap.synchronization.userIdAttributeName=mail), it's impossible to manage use groups in ldap this way.

In other ldap-enable applications it's othen possible to separately specify the attribute to search for when finding it as a member(Uid) value.

As I may have overlooked something: is something like this already possible with Alfresco?
If not: is there a work around available?
If not: is this a function I can put in Jira and expect to see available in 5.0x?

[mrogers]

The configurable properties are:
ldap.synchronization.groupIdAttributeName
ldap.synchronization.groupMemberAttributeName

So I'm fairly sure that you can't do what you want.

You can raise an enhancement request in JIRA but don't *expect* anything, especially for 5.0.   It will help if you
a) add as much detail as possible. 
b) add code and tests to the JIRA, it could be another community member that contributes. 
c) talk to one of alfresco's product managers at alfresco summit or otherwise.
d) If you are an enterprise customer then call support.

On the other hand if you don't raise it in JIRA then its not going to happen.

[ebogaard]

Thanks, just posted an enhancement request in Jira: https://issues.alfresco.com/jira/browse/ALF-21011
Hoping for the best 😉