1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
LDAPUserSatellite - Configure: Set the basic configuration for the LDAPUserSatellite
Description
This view is used to change the basic settings of a LDAPUserSatellite.
Controls
'Title' -- The (optional) title for this object
'LDAP user Folder' -- The LDAP User Folder this Satellite is
cooperating with.
'Groups Base DN' -- The DN for the branch of your LDAP database that
contains group records. Groups embody Zope roles. A user which is
part of a "Manager" group will have the "Manager" role if the
LDAPUserSatellite is invoked for role manipulation during a
request. This is an optional setting and prevents one of two ways
to add roles to a user. See *Group Mappings" below for the other
method.
'Groups search scope' -- Choose the depth for all searches from the
group search base dn. This setting is optional as well.
'Log Level' -- Specify what kinds of events get logged. The different
log levels are:
o 0: No logging entries will be made
o 1: Catastrophes, like failures to connect to the LDAP server
o 2: Major Events, like LDAPUserSatellite property changes
o 3: Minor Events, like initialization after Zope is restarted
o 4: Authentication failures
o 5: Successful authentications
o 7: Authentication from cache
o 9: Debugging, includes extra debugging info
'Operation' -- Select how the LDAPUserSatellite operates. It can either
operate in a simple fashion where roles are manipulated based on the
rules defined in this LDAPUserSatellite, or in recursive mode where all
LDAPUserSatellite objects between this location and the root are called
and each one applies its own role changes so that a cumulative effect
is reached. Recursive operation is potentially expensive and should
only be used if you know what you are doing.
'Apply Changes' -- Save your configuration changes.
'Group Mappings' -- Group mappings are the second way to add roles
to a user in the context governed by the LDAPUsersatellite object.
This part of the configuration screen will show all existing mappings
as well as a form to enter a new mapping.
Adding a mapping means that if a user has the role specified by
*LDAP Group* the role *Zope Role* will be added if the user object
enters the context governed by this LDAPUserSatellite object.
Mappings only *add* roles. They never subtract roles.
|
