Commit b9096650 authored by Jacob Vosmaer's avatar Jacob Vosmaer

What if the user belongs to multiple LDAP groups?

parent cbe22c9e
......@@ -45,6 +45,11 @@ As an admin you can also go to the group edit page in the admin area.
Now every time a member of the 'Engineering' LDAP group signs in, they automatically become a Developer-level member of the 'example group' GitLab group. Users who are already signed in will see the change in membership after up to one hour.
### Synchronizing with more than one LDAP group
If you want to add the members of LDAP group to your GitLab group you can add an additional LDAP group link.
If you have two LDAP group links, e.g. 'cn=Engineering' at level 'Developer' and 'cn=QA' at level 'Reporter', and user Jane belongs to both the 'Engineering' and 'QA' LDAP groups, she will get the _highest_ access level of the two, namely 'Developer'.
### Locking yourself out of your own group
As an LDAP-enabled GitLab user, if you create a group and then set it to synchronize with an LDAP group you do not belong to, you will be removed from the grop as soon as the synchronization takes effect for you.
......@@ -102,4 +107,4 @@ For installations from source, add the following setting in the 'ldap' section o
```yaml
sync_ssh_keys: 'sshpublickey'
```
\ No newline at end of file
```
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment