Dispaly Full Name instead of username in LDAP

[teecee]

I have LDAP auth working but at the top right of the corner it displays the user's login name. How do I configure it to display the user's Full Name? This is a Novell eDirectory LDAP system. My LDAP attribute I want to use is named "Full Name".

[MaxM]

You can try using the displayname-pattern ldap setting. If the ldap attribute is "Full name" then set it to displayname-pattern to
{Full Name}

[tfountain]

I'm attempting to do this as well and all that shows up is my login name (tfountain). I've tried both of these parameter values when for the 'displayname-pattern' attribute:

{displayName}

{firstname} {lastname}

Neither one works, just my login name displays. I am using the latest version of Deki Wiki and it has been updated. When I query the URI directly here is what I get:


<user name="tfountain">
<ldap-dn>CN=tfountain,OU=<unit>,DC=<location>,DC=<domain>,DC=com</ldap-dn>
<date.created>2000-00-00T00:00:00Z</date.created>
<firstname>Tony</firstname>
<lastname>Fountain</lastname>
<phonenumber>555-555-1212</phonenumber>
<email>tfountain@somedomain.com</email>
<description></description>
<groups>
<!-- Omitted groups for this post -->
</groups>
</user>

Now, if I use the Active Directory Explorer (http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx) I can see that displayName is a valid attribute. And firstname and lastname are being returned as well. Any suggestions here?

Here are all the configuration settings I have set now (since I showed you displayname-pattern above I'm excluding it here):

hostname = <server>.<location>.<domain>.com
bindingdn = CN=$1,OU=<unit>,DC=<location>,DC=<domain>,DC=com
userquery = samAccountName=$1
searchbase = DC=<location>,DC=<domain>,DC=com

[MaxM]

The displayname isn't in that xml. It should be an attribute on user just like name is. You're sure you're adding displayname-pattern as a service config setting and not a preference right?

[mhedley]

Hi,

where exactly is this configuration change placed? We've got LDAP auth over NTLM but can't get REAL NAME working in place of the username.

Any pointers and where to ADD the information would be greatly appreciated.



Cheers,

Mark

[merktnichts]

Same problem here. As I'm using AD, my attributes are firstname & lastname. So I added the following config setting to the LDAP service:


displayname-pattern = {firstname} {lastname}

Still Deki only displays my user name in the right corner. (Restarting/logging out doesn't seem to change anything either.) I have been trying this some months ago without success. But it still doesn't work for me with the current release.

Using trunk. (Note to MaxM: I removed the beta LDAP service and am using the new stock one already.)

[mhedley]

What is the new SID / URL reference for the LDAP service?

We're using:

sid://mindtouch.com/2007/05/BE TA/ldap-authentication

is that what your using?

Cheers,

Mark

[merktnichts]

That's for the "old" beta service, before the 8.05.2 release.

Now with 8.05.2 you have to use:
sid://mindtouch.com/2007/05/ldap-authentication

[mhedley]

we've tried:

sid://mindtouch.com/2007/05/ldap-authentication

and it stops authenticating when we do. Also there is no good refernece to WHERE the displayname-pattern needs to go?

Anyone help MaxM?

[merktnichts]

we've tried:

sid://mindtouch.com/2007/05/ldap-authentication

and it stops authenticating when we do.
You did upgrade to 8.05.2, didn't you? That's the first version including the new LDAP service (previously called "beta LDAP service").


there is no good refernece to WHERE the displayname-pattern needs to go?
That's documented here: http://wiki.developer.mindtouch.com/MindTouch_Deki/Authentication/LdapAuthentication

But I agree, it needs a bit more clarification, as we both don't get it displaying the full name.

That's also a place where it's documented, but the example doesn't work. Topic 6.6 on http://wiki.developer.mindtouch.com/MindTouch_Deki/FAQ/User_Management/How_do_I...Integrate_my_users_with_LDAP%2f%2fMS_Ac tive_Directory%3f

[mhedley]

I'm assuming its the latest and greatest dekiwiki. I downloaded it yesterday at work.

still no joy wth the new SID, anyone help here?!!

[MaxM]

I'm assuming its the latest and greatest dekiwiki. I downloaded it yesterday at work.

still no joy wth the new SID, anyone help here?!!

gotta be more specific here please.. Is the service running? Is it enabled? Have you tried any troubleshooting steps such as pointing your browser to it directly and authenticating, querying for users/groups?


As far as displayname-pattern goes, whats in the ldap howto is correct. It's a setting for the ldap service just like the others. Use it to build a display name which will become the user name for new users. Check the xml of a user record from the ldap service to see the generated displayname. Note that this display name only works for creating new users. You cant rename a user using this. (We'll be working on that soon)

[merktnichts]

Note that this display name only works for creating new users. You cant rename a user using this. (We'll be working on that soon)That explains the results I'm seeing. Thanks for clearing it up.


Check the xml of a user record from the ldap service to see the generated displayname.Okay, that works perfectly. I can see any modifications I do to the displayname in the xml, exactly as you described.

[jonc]

Note that this display name only works for creating new users. You cant rename a user using this. (We'll be working on that soon)

Hi, any update on the ability to rename existing users?

Thanks

[MaxM]

Hi, any update on the ability to rename existing users?

Thanks


Local user rename has been implemented since Kilen Woods. To rename external users, you may change them to local and then rename them. You can change local users to external if the same username exists externally.

[paul99]

Local user rename has been implemented since Kilen Woods. To rename external users, you may change them to local and then rename them. You can change local users to external if the same username exists externally.

Can you please clarify what this means?

I have some users who have logged in before using LDAP authentication. At that time, I didn't have the displayname-pattern set, so their names were displayed with their uid (e.g. t821789). Just now I added displayname-pattern to dispaly their full name. I got a user who's never logged in before to login, and his full name ("Peter_Smith") is correctly displayed after he logged in.

But for those other users, they still display with the uid. Why didn't my displayname-pattern change take effect for these users?!!

Thanks!

Paul

[paul99]

Hi,

I took a look at the users table:


+------------+----------------------+--------------------+
| user_name | user_real_name | user_external_name |
+------------+----------------------+--------------------+
| T821891 | Joe Smith | T821891 |
| x119356 | Ronald Juan | x119356 |
| x118268 | Christopher Basmayor | x118268 |
...

etc.

Is user_name what's used for displaying the name on the page? What is user_external_name used for?

Is it safe to just update this table to force display of the real name?

Thanks,

Paul