Update Login Name via LDAP

1 Requirements

The LDAP-import of ILIAS matches user accounts by one attribute that has to be specified. This attribute then determines the "external account name" of the user account in ILIAS and is used to match user accounts on the LDAP-server with user accounts in ILIAS. Usually the login name is configured to match the the LDAP-field/-attribute that specifies the login name or object name of the user account on the LDAP-server, i.e. UserPrincipleName, samaacountname, uid etc.

Depending on the schema used by the LDAP-servers admin, these attributes can contain personal information. For instance, the samaacountname may look like this: "jane.doe". In this case the schema would be: [FIRSTNAME].[LASTNAME].

In the above scenario the samaacountname might be changed by the administrator in case of marriage etc. While changing LDAP-fiels like "sn" or "givenName" is not a problem, changing the samaacountname is for ILIAS. In this case ILIAS will create a new user account with the next LDAP-import.

To solve this ILIAS would need the option to match LDAP-users by a second field that is globally unique and cannot (will not) be changed. It is important to note that this would need to be an optional setting.

2 Additional Information

• Idea / concept: Qualitus / sesterhenn
  
• Interest in funding: funding required
  
• Maintainer: (will be set by Jour Fixe / maintainer)
• Implementation of the feature is done by (will be set by Jour Fixe / maintainer)
• Testcases by: Qualitus / sesterhenn

3 Discussion

Zenzen, Enrico [ezenzen], 18 AUG 2022: This request no longer fulfills the requirements of the Feature Wiki. In consultation with the maintainer I change the status of the feature request to "Redundant / outdated". If the request is still relevant, please update template and mockups.

4 Implementation

...