ruby-on-rails - ldap 设备中的多个组可验证

Question

我正在尝试允许 group1 或 group2 中的用户登录但在 LDAP 授权期间，它正在检查两个组。

如果用户存在于 group1 或 group2 中，我需要允许他们登录。

有人可以帮忙吗？

在设计中.rb

config.ldap_check_group_membership = true

在 ldap.yml 中

 authorizations: &AUTHORIZATIONS

  group_base: ou=groups,dc=test,dc=com

 required_groups:

  cn=admins,ou=groups,dc=test,dc=com -----group1

  cn=users,ou=groups,dc=test,dc=com ----- group2

require_attribute:

# objectClass: inetOrgPerson
# authorizationRole: postsAdmin

development:
  host: # ip address is to be filled in here..
  port: # port number goes here..
  attribute: cn 
  base: # my tree base details go in here..
  admin_user: cn=admin_name,dc=test,dc=com
  admin_password: # password goes in here..
  ssl: true 
  <<: *AUTHORIZATIONS 

Answer 1

/devise_ldap_authenticatable-0.8.3/lib/devise_ldap_authenticatable/ldap/connection.rb

def in_required_groups?
    return true unless @check_group_membership

    ## FIXME set errors here, the ldap.yml isn't set properly.
    return false if @required_groups.nil?

    arr_res = []
    for group in @required_groups
      if group.is_a?(Array)
        res = in_group?(group[1],group[0])
        arr_res << res
      #  return false unless in_group?(group[1], group[0])
      else
        return false unless in_group?(group)
      end
    end
    DeviseLdapAuthenticatable::Logger.send(arr_res)
    return true if arr_res.include? true
   # return true
  end