How to give admin privilege to a normal user in Kolab WebAdmin

[Liutauras Adomaitis]

On 2018 m. gegužės 8 d., antradienis 17:24:07 EEST Gelpi Andrea wrote:
> Il 08/05/2018 11:56, Liutauras Adomaitis ha scritto:
> > On 2018 m. gegužės 6 d., sekmadienis 20:20:14 EEST Gelpi Andrea wrote:
> >> Il 06/05/2018 08:53, Liutauras Adomaitis ha scritto:
> >>> On 2018 m. gegužės 4 d., penktadienis 17:35:44 EEST Gelpi Andrea wrote:
> >>>> Hi,
> >>>> 
> >>>> 	is there a way to have more than one admin user, with different
> >>>> 
> >>>> credentials as it was in older version?
> >>>> I remembered in kolab V. 2.x it was possible to add a user as an
> >>>> administrator in kolab webadmin.
> >>>> 
> >>>> I'm using a kolab 16 over a debian 8.
> >>>> 
> >>>> I tried to add the admin role to a user, but the information has not
> >>>> been saved.
> >>>> 
> >>>> Any hint? Thank You.
> >>> 
> >>> Did you add admin or kolab-admin role? It should be kolab-admin role.
> >>> 
> >>> Liutauras
> >> 
> >> You're wright. I tried with kolab-admin, but it seems not to be retain.
> >> 
> >> After save when I come back to the user no role are present.
> > 
> > Role field should be autocomplete type of field, so when you start typing
> > "kolab...." it should suggest a list of roles to pick up (there is only
> > one
> > role by default - kolab-admin).
> > Check if you have roles defined in Roles section.
> > 
> > Liutauras
> 
> Yes, I have. From roles I can see 1 role kolab-admin and when I try to
> add it to a user I can only chose it.
> 
> After saving the user, when I come back to see the user configuration
> the role is gone.
> I have the impression that the webadmin interface doesn't really save it.

Try to add the role manually using ldap command line tools.
First you need to seach for the role under your LDAP suffix:
You need to run ldapsearch -D "cn=Directory Manager" -W -b "dc=domain,dc=tld" 
"(&(objectClass=ldapsubentry)(objectClass=nsroledefinition))"

If there is a role definition then you can add the role to the user. You need 
to add nsroledn attribute to your user object. The value of that atribute 
should be the DN of the role you found with ldapsearch above. It will probably 
be cn=kolab-admin,dc=domain,dc=tld

To ldapsearch for the role you need to use filter for nsrole attribute.

Liutauras
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.kolab.org/pipermail/users/attachments/20180509/09eef5b3/attachment.sig>