Nextcloud: ldapEmailAttribute and Samba userPrincipalname

[antonwantstosleep]

I`ve got an issue with Nextcloud user email address imported from Samba AD.

When I create domain in NS8 I follow the Active Directory Naming FAQ:

• my external domain (website) is example.com
• so i choose ad.example.com or corp.example.com as Samba AD domain name (realm name, root DN, etc.)

Then I create users, and they have a user@ad.example.com or user@corp.example.com UPN's by default. Also I fill their mail field with user@example.com (in LAM application).

Nextcloud fires imageroot/bin/setup-ldap every time on boot, so set_ldap("ldapEmailAttribute", "userPrincipalname") row overwrites my changes made in Nextcloud UI (I want to switch the ldapEmailAttribute from userPrincipalname to mail).

I use latest NS8.

My options:

• change domain name to example.com (and have DNS issues, right?)
• create an additional UPN suffix example.com with RSAT (and remember to change it on every new user creation, right?)
• ask your help and advice

Thank you! Sorry for my clumsy English!

[DavidePrincipi]

Ciao Anton,
before filing an Issue here we usually discuss bug and features in the NethServer Community Forum and with Nethesis teammates. If you have not done it yet, please join the community here: https://community.nethserver.org/.

See also: https://handbook.nethserver.org/issues/#opening-issues

---

Discussion (PVT) https://mattermost.nethesis.it/nethesis/pl/4kwufk5bzjfs3yawnhnax5jmpc
Forum threads:

• https://community.nethserver.org/t/nextcloud-ldapemailattribute-and-samba-ad-userprincipalname/25357
• https://community.nethserver.org/t/nethserver-8-i-am-not-able-to-log-into-nextcloud-with-any-email-address-but-i-can-log-in-with-same-email-addresses-into-webtop/24956?u=davidep

[stephdl]

QA

version to test : ghcr.io/nethserver/nextcloud:1.4.1-dev.2

The purpose of the test is to allow the user to login with its mail address (LDAP mail) and not the LDAP userPrincipalName. See readme

In short we want to login with user@domain.com and not user@ad.domain.com

• install an ad with DN ad.domain.com
• create some users, set the mail address when you set the users to user@domain.com
• install nextcloud nextcloud:1.4.1-dev.2 , configure it
• add to the environment the properties: LDAP_MAIL_ATTRIBUTE=mail

runagent -m nextcloud1
vim environment
systemctl restart --user nextcloud

login to the nextcloud with

• user
• user@ad.domain.com
• user@domain.com

[mrmarkuz]

Test case verified

Login to Nextcloud worked as:

• user
• user@ad.domain.com
• user@domain.com
• Login also works when setting the mail address to something else like "user@testdomain.com"