You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The invite user feature creates a user account with the specific email address supplied and a unique username munged from the email address. Given ckanext-ldap only authenticates for CKAN users that it has created, the invited user will not be able to authenticate via LDAP. For site using LDAP authentication this results in a) reduced functionality and b) a bad user experience.
The simplest option would be to provide a template that overrides the add member form and either removes the invite user feature or provides advice that it's not functional for LDAP users. Alternatively, the extension could provide an LDAP enabled invite user feature, that does a lookup for LDAP users and creates the user account such that LDAP auth will work.
The text was updated successfully, but these errors were encountered:
We've got a client who may be interested in this addition. Currently we've disabled invite user through a template in a separate extension and they are assessing whether they need it LDAP enabled. If they want to proceed and you are happy for such a feature to be added to ckanext-ldap and we agree on a solution then we can work on a PR.
I see this is an old issue - but It is one that I am also seeking to fix. I'm not keen on disabling the invite feature as its likely to be a major method of getting people to use the catalogue in our org.
The invite user feature creates a user account with the specific email address supplied and a unique username munged from the email address. Given ckanext-ldap only authenticates for CKAN users that it has created, the invited user will not be able to authenticate via LDAP. For site using LDAP authentication this results in a) reduced functionality and b) a bad user experience.
The simplest option would be to provide a template that overrides the add member form and either removes the invite user feature or provides advice that it's not functional for LDAP users. Alternatively, the extension could provide an LDAP enabled invite user feature, that does a lookup for LDAP users and creates the user account such that LDAP auth will work.
The text was updated successfully, but these errors were encountered: