922845 - Better documentation on LDAP configuration for multiple domains

Status: UNCONFIRMED

(Bugzilla :: Documentation, defect)

Description

[Marshall]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812

Steps to reproduce:

1. Opened http://www.bugzilla.org/docs/4.4/en/pdf/Bugzilla-Guide.pdf
2. Searched for the terms:  LDAP, "active directory", DOMAIN, LDAPserver, LDAPBaseDN, and 3268.


Actual results:

Nothing mentioned on how to properly configure LDAP authentication for multiple domains by using a subtree search scope.


Expected results:

From other products that use LDAP, I've seen settings for:  LDAPserver, LDAPBaseDN, and "LDAP Search Scope".  However, there's no place to set the search scope within Bugzilla.

If the desired result is to search the LDAPserver for multiple domains, the LDAPserver setting should be expanded upon within the documentation.  E.g.:

3.1.10 LDAP Authentication
   ... Bugzilla tries to bind to LDAP using those credentials and, if successful, tries to map this account to a Bugzilla account.  LDAP will be searched using just the single domain set via LDAPBaseDN.  See the LDAPserver setting below if multiple domains should be searched. ...

   LDAPserver
   ...
   For multiple domains to be searched; set the port to 3268.  This forces the LDAP Global Catalog to be searched.
   For example, normal LDAP: ...

NOTE:  the above may be specific to Active Directory only.  A more thorough review by an LDAP and AD expert should be done.

Comment 1

[Gervase Markham [:gerv]]

Hi Marshall,

"Nothing mentioned on how to properly configure LDAP authentication for multiple domains by using a subtree search scope."

Is the issue you are raising that this is not _possible_, or that it is possible but it's not _documented_ how to do it?

Gerv

Comment 2

[Marshall]

Hey Gervase,

I got Bugzilla to work with multiple domains.  It's the documentation that needs updating.