Message Boards

how to make Ldap DO NOT update user's info

Scarletake Bwi, modified 2 Years ago.

how to make Ldap DO NOT update user's info

Expert Posts: 326 Join Date: 12/20/10 Recent Posts

hi

i use liferay ce 7.4.3.5 ga5

after i config ldap of Instance Settings, it works

and i do not check everything in Import

but even though, after i login, my first name and last name still be updated.

how can make it just auth user's password via ldap, and do not change name or everything?

thank you in advance

thumbnail
Olaf Kock, modified 2 Years ago.

RE: how to make Ldap DO NOT update user's info

Liferay Legend Posts: 6396 Join Date: 9/23/08 Recent Posts

There's batch import (e.g. everybody at once), or individual import. Batch import can be deactivated if it's enough to update user accounts once they log in. Individual import can't be deactivated: Upon login, LDAP is the authoritative source - that's what LDAP users typically assume. Otherwise: Why bother with LDAP?

Scarletake Bwi, modified 2 Years ago.

RE: RE: how to make Ldap DO NOT update user's info

Expert Posts: 326 Join Date: 12/20/10 Recent Posts

hi Olaf

thank you for reply. 

let me explain, because my user from many different country, we all have name of mother language, such like chinese, taiwanese, thai..etc.

when i load their data up to system, i will use their name with their language, and system will display their name with their mother language.

i want keep it.

but now i use ldap for they can easier to use it, do not need to remember another password, but now, their name be changed, same as other cold system.

in 6.2, i will try hook, but now it seems little bit more difficale.

again, thank you,

thumbnail
Olaf Kock, modified 2 Years ago.

RE: RE: how to make Ldap DO NOT update user's info

Liferay Legend Posts: 6396 Join Date: 9/23/08 Recent Posts

...and LDAP doesn't know about their real name? I think it's preferable to fix this in LDAP and just import the proper name. AFAIK you can also override the import process (so that you don't overwrite any existing data), but

  • I can't tell you where to look from the top of my head
  • I'm not sure this is advisable: E.g. think about name changes in LDAP: If I'm using my federated account, I'd be irritated if this wouldn't propagate to other systems
  • you might want to consider exxporting Liferay user data back to LDAP if users can edit their data themselves

 

Scarletake Bwi, modified 2 Years ago.

RE: RE: how to make Ldap DO NOT update user's info

Expert Posts: 326 Join Date: 12/20/10 Recent Posts

hi Olaf

in my system's situation, we do not want it write back to LDAP, it's belong to mother company, for global system. they need English name.

it's not big deal, just user's feeling, i will update in this thread or blog if i make it.