Comments on: SVN and Active Directory

By: Will

Will — Fri, 04 Jun 2010 09:01:21 +0000

Thanks Nikolaus – should be working again now!

By: Nikolaus

Nikolaus — Fri, 04 Jun 2010 08:50:55 +0000

Hi,
the download location seems to be unavailable now. Could you fix the download link, please?
Thanks for your work!

By: Alex

Alex — Tue, 04 Nov 2008 11:20:50 +0000

It seems that I forgot to exclude disabled user accounts. Altering the get_member_users subroutine as follows should do this:

sub get_member_users($)
{
my($group) = @_;
my @users = ();
my $members = $group->get_value(‘member’, asref=>1);
foreach (@{$members}) {
my($mesg, $member, @objectClass, $accountState);
$mesg = $ldap->search(
base => $_,
filter => “(objectClass=*)”,
attrs => [ 'member', 'dn', 'sAMAccountName', 'objectClass', 'userAccountControl' ]
);
$member = $mesg->entry(0);
@objectClass = @{$member->get_value(‘objectClass’, asref=>1)};
if ( grep $_ eq “group”, @objectClass ) {
push @users, get_member_users($member);
}
if ( grep $_ eq “user”, @objectClass ) {
$accountState = $member->get_value(‘userAccountControl’);
# Exclude disabled user accounts.
if ( ( $accountState & 2 ) == 0 ) {
push @users, @{$member->get_value(‘sAMAccountName’, asref=>1)};
}
}
}
return @users;
}

By: Alex

Alex — Thu, 18 Sep 2008 08:15:50 +0000

Well spotted.

I’ve updated the post accordingly and brought the script up to date too. It’s had some bugfixes and style improvements since I originally posted this.

By: anoop

anoop — Wed, 17 Sep 2008 20:52:52 +0000

The script works very well. i had to tweak it a bit but i can’t remember now what i did to it. Anyway, just wanted to correct an error on the security.conf file you have above. You need the @ in front of Administrators when you’re using providing permissions to a group for a particular repo.