Short description
I have patched our local installation of MoinMoin to accept multiple base DN's for LDAP lookups. Specifically, we have two domains with shared groups, and we need to be able to include queries across both domains for group membership. This involves changes to two files:
- wikiconfig.py
MoinMoin\auth\ldap_login.py
In the first file, the ldap_base varaible becomes a list:
- ldap_base=['ou=test OU 11, dc=daveclayton, dc=info',
- 'ou=test OU 12, dc=daveclayton, dc=info']
In the second file, look for the following line (search for 'ldap_base' as there is only one instance of this string)
lusers = l.search_st(cfg.ldap_base, cfg.ldap_scope, filterstr.encode(coding),
- attrlist=attrs,timeout=cfg.ldap_timeout)
and change it to:
- lusers=[] for ldap_base_i in cfg.ldap_base:
- lusers = lusers + l.search_st(ldap_base_i, cfg.ldap_scope, filterstr.encode(coding),
- attrlist=attrs, timeout=cfg.ldap_timeout)
- lusers = lusers + l.search_st(ldap_base_i, cfg.ldap_scope, filterstr.encode(coding),
Hi, for which version is that patch?
We have support for using multiple ldap authenticators in moin 1.7. Thus, you don't need to hack lists into the code/config, you just have multiple ldap authenticator objects. BTW, we are currently implementing some ldap group support, so if you have a clue about ldap, please support us with some field feedback. 
-- ThomasWaldmann 2008-06-11 17:15:59