Add LDAP with existing user / migrate local to ldap user accounts

Seafile Server
1

After adding LDAP login with the same login credentials the existing user are able to login with both credentials. Local user account and LDAP user account. Since the login attribute is the same they can access their data just fine with either account.
So how does one disable local user account access after successfull LDAP setup?

Does someone have a working FreeIPA filter for LDAP? ‘MemberOf’ should be supported but I couldn’t get the filter working within 10 minutes and wanted to ask before I waste more time.

Thanks!

2

Hi,

can you not just delete the local users from the ccnet-db.EmailUser table?

3

Yes we can edit the DB of course. But shouldnt the software be able to handle such switch?
What about all the libraries. Will the ownership still work out?

4

The repos are owned by user@domain, as you can see in the RepoOwner table in seafile-db. So it shouldn’t matter, if it is a local user or an ldap user. (Of course, that’s only my interpretation :wink:)