LDAP wizard user experience

[MorrisJobke]

I set up today for the first time ownCloud together with LDAP and I want to share my user experience.

Note: I don't have set up the LDAP server (I used one already deployed in our environment) and I never have heard/read about how LDAP works.

• propose default ports (prefill 389 and if ldaps:// is added switch to 636) - switch the port only if it wasn't set by the user to something other than those both
• better error messages: I noticed them in the log, but the wizard often says: "Base-DN couldn't be found" (or something like that) - but it was wrong hostname, port or credentials. That would help a lot - especially newbies to LDAP.
• going back and forth in the tabs doesn't cleans the old state (if you change the base-dn, object-classes weren't reloaded and then result in some confusion on my side, because they were simply not possible for that base-dn ;))
• if the displayname of the user (advanced tab -> directory settings -> first setting) isn't set to a valid attribute a user can't login and isn't shown in the user management - add a warning in the wizard and note this in the "test config step" - also noted in LDAP: state that users without displayname are ignored owncloud-archive/documentation#290

cc @jancborchardt for the UX part

[MorrisJobke]

cc @blizzz and @PVince81 of course ... as the LDAP gurus :D

[MorrisJobke]

And a big THANKS to @blizzz for this awesome piece of software (LDAP wizard)...without this I wouldn't even been at this point :) 🚀

[MorrisJobke]

I added the fourth point ;)

[PVince81]

@MorrisJobke I'm not an LDAP guru, just slightly more experienced than you... but way behind @blizzz

[blizzz]

propose default ports (prefill 389 and if ldaps:// is added switch to 636) - switch the port only if it wasn't set by the user to something other than those both

Ports are auto-detected and entered if found (in practice there are even more possibilities).

better error messages: […]

Ack ;)

going back and forth in the tabs doesn't cleans the old state (if you change the base-dn, object-classes weren't reloaded and then result in some confusion on my side, because they were simply not possible for that base-dn ;))

Ack, good point.

if the displayname of the user (advanced tab -> directory settings -> first setting) isn't set to a valid attribute a user can't login and isn't shown in the user management

There is a pull request to auto-detect a proper attribute, so this will not happen anymore :) #11837 (testers/reviewers needed)

[RobinMcCorkell]

Most of this is done, with the exception of error messages being shown in the wizard. cc @blizzz

[blizzz]

Should be all fixed in 8.1.