<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Ionescu,<br>
<br>
If you are using AD, you should be using the AD authenticator and
not the LDAP authenticator. They are not quite the same thing.<br>
<br>
As for the "organization" versus "company" attributes, if the
organization attribute is empty, the company attribute is copied
into it. That means the rest of ZendTo can continue to call it
'organization' without worrying about Microsoft's naming
conventions.<br>
<br>
If the LDAP attributes for a user include the "company" attribute,
that will be used as the "organization" in ZendTo. If there is no
"company" attribute, then the preferences.php setting
"authLDAPOrganization1" (for the first forest searched) is used
instead.<br>
<br>
Hopefully that explains things a bit better.<br>
<br>
Cheers,<br>
Jules.<br>
<br>
<br>
<div class="moz-cite-prefix">On 11/02/2020 3:41 pm, Ionescu Gigel
via ZendTo wrote:<br>
</div>
<blockquote type="cite"
cite="mid:WM!565063bb0361be6d2d43c9bcd717a220826bcc406cdc0f4dcb793cee28b2134f255a6bdd42f850a4ee8d633b54a02cd8!@mx.jul.es">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hello,
<div>I want to fill in the organization field automatically from
AD.<br>
<div>I would like to know how the authLDAPOrganization option
really works and if my understanding is right.</div>
<div>I read some old posts from the time this option was
introduced, but I still don't get it. As far as I see what I
put in that option that will be the default text for
internal authenticated users.</div>
</div>
<div><br>
</div>
<div>From the lib/NSSLDAPAuthenticator.php code in
$attributeNames array I see you are trying to get some
"organization" attribute. Actually, this will be always empty
as AD stores the name of the company in "company" attribute,
so few lines down if (!@$response['organization']) does not
make any sense.</div>
<div><br>
</div>
<div>Can someone enlight me, please?</div>
<div>As I said, my goal would be to have the organization from
AD if
authLDAPOrganization is empty or if I set the AD attribute
where I store the name of the organization.</div>
<div><br>
</div>
<div>Regards,</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="http://jul.es/mailman/listinfo/zendto">http://jul.es/mailman/listinfo/zendto</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</body>
</html>