manifoldcf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Julien Massiera (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CONNECTORS-1430) Return group names from the Active Directory
Date Fri, 02 Jun 2017 14:09:04 GMT

    [ https://issues.apache.org/jira/browse/CONNECTORS-1430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16034743#comment-16034743
] 

Julien Massiera commented on CONNECTORS-1430:
---------------------------------------------

I had to do this modification for a client that uses MCF to index files into a Datafari Solr
server. 
Here is the scenario:
- The files are crawled from two types of of repository sources: an Oracle Database, and several
Windows Shares. 
- On every input source, the security is activated and the ACLs are indexed.   
- The windows shares and the Oracle Database share the same users that can be retrieved in
their Active Directory
- The problem is that the Oracle Database possesses its own SIDs for the ACLs, and these ACLs
are completely different from the ones in the Active Directory. The only way to match them
is through their names. This is the reason why we configured the JDBC connector to retrieve
names instead of SIDs during a crawl.
- They use the Active Directory authority connector with Solr to apply the user ACLs during
a search.
- As the AD authority connector only returns SIDs and not names, without this modification,
only the windows share files are searchable

> Return group names from the Active Directory
> --------------------------------------------
>
>                 Key: CONNECTORS-1430
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1430
>             Project: ManifoldCF
>          Issue Type: Wish
>          Components: Active Directory authority
>    Affects Versions: ManifoldCF 2.6
>            Reporter: Julien Massiera
>            Assignee: Karl Wright
>            Priority: Minor
>         Attachments: CONNECTORS-1430.patch
>
>
> Currently the Active Directory authority connector only returns the ACLs SIDs but not
the names.
> Some users may want to work with names or both and thus SIDs are not enough.
> For those cases, it would be good if the authority connector have an option in his configuration
to also return the names in addition to the SIDs



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message