Hi, I'm setting up an evaluation of Projeqtor V5.2.1, and I like what I've seen so far =) I've successful configured LDAP integration. and Projeqtor creates new users from LDAP. I have some questions about getting Projeqtor to automatically populate user details.
1) Is it possible to populate the 'initials' field and import a photo from LDAP?... if so, which attributes are used?
2) I notice that 'real name' and 'email address' fields only populate when the $paramLdap_search_user is given permission on the LDAP server to read other user's cn and mail attributes. For security, I was rather hoping to limit search_user's access to just the attribs required for login searching (dn and uid). Is there a workaround?
3) I also notice that changes to cn or mail in LDAP are not replicated to Projeqtor when a user logins in. This is inconvenient because the user does not seem to be able to change the fields themselves in Projeqtor (the admin has to do it). Is there a workaround (for instance can I enable LDAP user's to edit their own Projeqtor email field)?
1) Is it possible to populate the 'initials' field and import a photo from LDAP?... if so, which attributes are used?
No, it's not possible.
Only name and email are retreived because they are "standard" fields.
2) I notice that 'real name' and 'email address' fields only populate when the $paramLdap_search_user is given permission on the LDAP server to read other user's cn and mail attributes. For security, I was rather hoping to limit search_user's access to just the attribs required for login searching (dn and uid). Is there a workaround?
No, no parameters solution. You'll have to edit code to do this.
3) I also notice that changes to cn or mail in LDAP are not replicated to Projeqtor when a user logins in.
No, but these data are (normally) very stable. They are often used as keys.
This is inconvenient because the user does not seem to be able to change the fields themselves in Projeqtor (the admin has to do it).
Exact
Is there a workaround (for instance can I enable LDAP user's to edit their own Projeqtor email field)?
No, no such workaround exist. If you give acces to user screen, all data will be uipdatable. What you can try is upgrade the "User Parameter" screen to add a "Change email" feature, like existing "Change password".
Thanks babynus, if we go with Projeqtor as our solution then I'll dig more deeply into the code and maybe hack something together. For now I'm just investigating the issues.