Compatibility

You can safely ignore this page if you are not upgrading from a pre-2.1.0 release! -> Quick Start

Starting with GLAuth 2.1.0:

  • it is possible to browse through the server’s tree using LDAP clients
  • scopes (base, one, sub) are supported and behave (mostly) as expected
  • whenever necessary, organizational units ("ou") are utilized
  • groups are available both as posixgroup and groupOfUniqueNames entities

Enabling Compatibility Mode

In order to prevent breaking existing setups, some of these changes are not enabled by default. To switch to full compatibility mode, update your configuration file:

[backend] 
  datastore = "config"
  baseDN = "dc=glauth,dc=com"
  nameformat = "cn" 
  groupformat = "ou"

Note that cn is already the default search attribute. You can use instead uid or ou and, as long as your bind DN if configured accordingly, you will be able to browse/search the directory.

Noticeable changes

When browsing/querying with specific scope…

Searching from a top level, dn refers to the correct path:

-dn: cn=hackers,ou=superheros,c=glauth,dc=com 
+dn: cn=hackers,ou=superheros,ou=users,dc=glauth,dc=com 
-dn: cn=hackers,ou=superheros,dc=glauth,dc=com 
+dn: cn=hackers,ou=superheros,ou=groups,dc=glauth,dc=com

Membership refers to organizational units:

-memberOf: cn=superheros,ou=groups,dc=glauth,dc=com 
+memberOf: ou=superheros,ou=groups,dc=glauth,dc=com

Top-level classes are reporting their class hierarchy correctly:

 objectClass: posixGroup
+objectClass: top
Copyright 2021