Security and External Authentication

[gharris]

I've seemingly been successful at pulling in log in authentication from an external server. However, I don't seem to find a way to translate external groups into file security groups. I.E. On an AD server, if I have a group called Sales, there doesn't seem to be a way to add the Sales group inside DocuBin for file permissions. Am I missing something or is this a planned feature?

Thanks

[Michael Gaslowitz]

DocuBin supports two externally authenticated groups: docubinuser and docubinadmin. Add these two groups to your AD server, and the Sales group to whichever DocuBin group works best for you. The main difference is admins can manage other users, and upload folders to the root level of DocuBin.

[gharris]

Michael,

I understand that and have done so. (Actually, I created a the DocuBin groups as container group in AD and added the needed groups to the DocuBin groups. It's worked well.) However, that is for application authentication, and does not apply to file permissions whatsoever. Therefore, I have to duplicate group administration efforts. Once on the server for other pieces, and a second time inside Docubin. How do I do away with such duplication of efforts? From the FileMaker documentation it seems that FileMaker can read from the AD for such purposes beyond initial application authentication, if the app is programmed that way. Does what I am describing make sense? Is it possible right now? If it's not, is it in the roadmap?

Thanks

[Michael Gaslowitz]

We created two privilege sets especially for external authentication so we would know how a user's account was authenticated, but there is no real way to read groups from AD and recreate them in DocuBin.

[Wirelessmac]

I can't get access AD so is it possible to authenticate against local users and groups under Mac OS X in the case where DocuBin is being hosted on same machine?

[Michael Gaslowitz]

External Authentication is driven by Group membership, so if you can create the two DocuBin groups on your Mac OS X machine in addition to your users, I believe it should work.