Hi All,
I’m having problems with auto completion when sharing (sync with LDAP :
Nextcloud version : 15.0.0.10
Operating system and version : Debian 9 u1
Apache or nginx version: Apache/2.4.25 (Debian)
PHP version : 7.0.33-0+deb9u1
I configured LDAP with my instance.
I restricted users to Active Directory group membership.
( (&(|(objectclass=person)(objectclass=user))(|(|(memberof=CN=GG_group,OU=Groupes globaux,OU=Groupes,OU=TEST,DC=TEST,DC=dom)(primaryGroupID=9313))))
Everything is fine for Users List and authentication, but when I share a file, all users in the Active Directory are visible with the auto-completion.
This is a problem because I do not want all accounts in the Active Directory to be visible, only those belonging to the group if possible.
Thanks in advance.
Is this the first time you’ve seen this error? (Y/N): Y
Steps to replicate it:
- Configure LDAP on server
- Restricte NC users with an AD group
- Share a file : Auto completion list ALL AD users (not only Users in group)
The output of your config.php file in /path/to/nextcloud
(make sure you remove any identifiable information!):
$CONFIG = array (
'instanceid' => 'XXXX',
'passwordsalt' => 'XXXX',
'secret' => 'XXXX',
'trusted_domains' =>
array (
0 => 'IP',
1 => 'domain.fr',
),
'datadirectory' => '/var/www/nextcloud/data',
'dbtype' => 'mysql',
'version' => '15.0.0.10',
'overwrite.cli.url' => 'http://IP',
'dbname' => 'nextclouddb',
'dbhost' => 'localhost',
'dbport' => '',
'dbtableprefix' => 'oc_',
'dbuser' => 'nextcloud',
'dbpassword' => 'XXXX',
'installed' => true,
'memcache.local' => '\\OC\\Memcache\\APCu',
'memcache.distributed' => '\\OC\\Memcache\\Memcached',
'memcached_servers' =>
array (
0 =>
array (
0 => 'localhost',
1 => 11211,
),
),
'ldapIgnoreNamingRules' => false,
'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
'ldapUserCleanupInterval' => 51,
'mail_from_address' => 'no-reply',
'mail_smtpmode' => 'smtp',
'mail_sendmailmode' => 'smtp',
'mail_domain' => 'domain.fr',
'mail_smtphost' => 'mail.domain.fr',
'maintenance' => false,
'updater.release.channel' => 'production',
'mail_smtpport' => '587',
'mail_smtpsecure' => 'tls',
);