When setting...


gitlab_rails['omniauth_auto_link_ldap_user'] = true


...omniauth providers are linked to the ldap account on login with auto 
account creation, but the email isn't hard set on...


/profile


...as it is when the account is created when logging in directly with ldap. 
 In other words...


set


gitlab_rails['omniauth_auto_link_ldap_user'] = true

gitlab_rails['omniauth_block_auto_created_users'] = false

gitlab_rails['omniauth_providers'] = [

    {

        "name"=> "cas3",

        "label"=> "cas",

        "args"=> {

            "url"=> 'XXXXXXXXX',

            "login_url"=> 'XXXXXXXX',

            "service_validate_url"=> 'XXXXXXX',

            "logout_url"=> 'XXXXXX'

        }

    }

]


then with no previous account created, log in with cas.  The email address 
is set though the information in ldap and the account is tied to the 
identity ldap, but the email address is changeable.  If logged in through 
ldap the email address become locked.


I believe with the auto_link_ldap_user ldap_email isn't being set and saved 
to true on creation.


Doug

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/cd1c7c09-9407-4c90-9592-960b06e63419%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to