Group Permissions

[xtrim]

Hi

In my solution on FMP6 I had around 5000 users.

I built a whole security and permissions backbone on my own.

Now, with FMP7 I don't need it anymore...But there is a small problem..

I don't want to create 5000 new acounts...

So, my question is If I have a table with all the users and their password, do you think there is a way to link between this information and the built-in security in FMP7? Is there a way to give Group permissions in anyway (and still be able to login with any account?) am I making any sense...??

[Steven H. Blackwell]

External Authentication with FileMaker Server 7.

That said, 5000 accounts can be created in a manner of minutes automatically.

[hayesk]

If they all have the same privileges, make one privilege set, and then import the usernames/passwords into a temporary table, and script the creation of usernames/passwords to be part of that privilege set.

[xtrim]

Thanks....

But I have several privilege sets for the users... (4 to be exact)

How do I apply them if a user logs in through the LDAP?

About creating the account..yes it is possible. The problem is in maintanence.

IT is already controling this information, no need for redundancy...

[hayesk]

Well, 4 isn't several - it just means running the script 4 times. As for LDAP - I'm not sure as I haven't used LDAP yet. I believe you still create the usernames, but the password authentication is controlled through LDAP. I don't believe you enter the name of the privilege set on the LDAP server, but I could be wrong.

Look on FM's web site in the Tech Briefs section. There are two articles on security and I believe they address the issue of privilege sets for LDAP authenticated users.

[Steven H. Blackwell]

LDAP does not control external authentication. Active Directory, Open Directory, or server local accounts do.

There have been some significant changes to this in the FileMaker Server 7.0v2 rev.

[hayesk]

Yes, but the question still applies, just a misnaming of the external authentication technology. How does FMS handle privileges when the user logs in through Active or Open Directory?