Allow the LDAP plugin to access the webif instead of only creating mobile users

[x23piracy]

Hi,

is it possible to get an option to allow webif access to a valid domain user instead of creating a fog mobile account?

Regards X23

[Tom Elliott]

It’s possible, but no. The reason it was implemented in such a fashion is so you don’t just have anybody signing in and the FOG Admin has to adjust the “privileges” to ensure proper rights.

FOG Lacks a decent access control setup for now, and just making everybody an admin without approval would, to me, seem to lead to many other security risks, not to mention potential loss of integrity of your fog server.

[x23piracy]

@Tom-Elliott well i just want to enable that for a special ou where only admins are members, i don’t see any problem if just don’t like it. Asking is for less

Regards X23

[Tom Elliott]

I’ve added a checkbox to allow you to tell whether or not to have the selection add the user as admin.

It will require removing the ldap plugin, and reinstalling so the database get’s reflected with it’s value. I don’t have a way to update schema on a plugin, sorry.

[x23piracy]

@Tom-Elliott you are a magician

[x23piracy]

@Tom-Elliott where should that checkbox be? i removed the plugin and reinstalled it now i am searching for that checkbox

Regards X23

[Tom Elliott]

@x23piracy Did you update to latest first?

[x23piracy]

@Tom-Elliott currently on 7783 and with it, ldap seems to be broken.

Regards X23

[Tom Elliott]

@x23piracy You need to update first.

[Tom Elliott]

Specifically, 7795 is the most current.

[x23piracy]

@Tom-Elliott sometimes i hate to be on trunk i will do and get back to you…

[x23piracy]

@Tom-Elliott another idea, why not a checkbox in each ldap definition where i can enable webif login or mobile access?
That way we can have both, users creating their quick image access and others who can login with their ad account to the webif.

Regards X23

[Tom Elliott]

@x23piracy I don’t know what you mean. That’s what hte checkbox does.

Unchecked means it’s mobile. Checked means it’s admin.

[x23piracy]

@Tom-Elliott ah okay and this checkbox can be found in the ldap definition? Sorry haven’t upgraded yet to latest trunk.
When the checkbox is within each ldap definition then my question is obsolete.

Regards X23

[Tom Elliott]

@x23piracy Yes.

[x23piracy]

@Tom-Elliott i’ve done the update but not it seems that the plugin is not working anymore, also the checkbox (create admin) will always be checked also when you don’t check it while initially creating the ldap.

Regards X23

[Tom Elliott]

@x23piracy All of these should now be fixed. Remember, you do have to update first to see the fixes. You shouldn’t need to delete and readd though.