ldap question regarding nextcloud+tjener

[Simon Oosthoek <s.oosthoek@xs4all.nl>]

Hi all

I already have a nexcloud server on a different host than the tjener, 
but it is using ldap for authentication.

I want to use group features in nextcloud v12, but it doesn't seem to 
work. I can see the groups defined in Gosa (students/teachers/admins), 
but the users listed in nextcloud don't show that they are members of 
these groups and I cannot tell nextcloud to put them in a group (more or 
less expected, as the connection to ldap is read only). I can "define" a 
group, but also not put users in them as members.

I seem to remember that there may be some change in ldap necessary to 
make this work, but I can't remember it, and it isn't easy to google 
for, it seems.

I'm using the following Base DN for ldap, from nextcloud:

dc=skole,dc=skolelinux,dc=no

for users, the filter (|(objectclass=posixAccount))

login attributes: (&(|(objectclass=posixAccount))(uid=%uid))

and for groups: (|(cn=admins)(cn=students)(cn=teachers))

This results in a system where a user defined on the tjener (gosa) can 
login, regardless of group membership.

Does anyone have something like this working? (If so, how?)

Cheers

/Simon

PS, this was all configured by a fellow parent who is now unavailable 
for further work on this.