Hi, I’m using OpenLDAP / NC 12 Am I forced to use the memberof overlay to allow only members of a specific group to login ? Cheers

might help: [image] Migration to LDAP keeping users and data ℹ️ Support Currently, I’m trying to migrate to LDAP. I’d like to keep the existing users and this seems to be a kind of an issue. By default, nextcloud creates new nextcloud users for all these LDAP …

Thanks but that’s not what I’m asking. It seems NC can’t check if the user is a member of specific group before granting login ? I mean based on an groupofnames objectclass entry. It would imply NC to perform TWO requests: First one to look if the %uid is member of the group (groupofnames entry) …

You might want to use something like (&(|(objectclass=posixAccount))(|(memberof=cn=oc,ou=functional groups,dc=Yourserver,dc=de))) in the User tab. True, the memberOf overlay helps you.

Thanks @joergschulz , but as you noticed it’s not my use case and I believe (I hope) I’m not alone : I don’t use any overlay on my openldap installation. And I don’t want to be forced to :wink: You could say, “you’re free to implement it if you like”, of course ! I don’t have much time right know, b…

Hi mhow2! I’m in the same situation: I’m currently unable to use the memberOf overlay with my LDAP setup. Did you manage to get your setup up and running? Thanks and best regards Frank

I don’t understand the issue… the memberOf overlay is simply a convinience where the account’s member groups are available as an account attribute. AD does provide this, but OpenLDAP don’t, at least not in the standard configuration. You can always achieve the same by crafting the appropriate LDAP …

LDAP App : Allow only members of group X to login

ℹ️ Support

Hollerauer July 4, 2017, 12:06pm 2

might help: