Kopano-Meet contacts

Apps & App Center
#1

Hello again,

is there a way to limit the contacts from kopano-meet users to UCS-groups? Now I - and everybody else - sees all UCS users.

Best,
Bernd

#2

hi @lebernd,

the filter can be adapted. So far I just wanted to have all users being able to directly use it,

You need to change adapt the filter in https://stash.z-hub.io/projects/K4U/repos/kopano-apps/browse/kopano-meet/compose?at=b408cfd971b#93 (and remove the comment). Its best to do this through an override file, so that its preserved through updates.

1 Like
#3

I have created the following override for test purpose docker-compose.override.yml:

version: "2.0"
services:

  kopano_grapi:
    environment:
      - LDAP_FILTER=(&(objectClass=organizationalPerson)(memberOf=cn=app-meet,cn=groups,dc=int,dc=domain,dc=de))
      #- LDAP_FILTER=(objectClass=organizationalPerson) # TODO identify attribute to filter on to avoid join users showing up in the gab

What do I have to do to execute the override?
Will it be executed on univention-app start kopano-meet ?

It sure would be nice if I could filter on the group memberships of the user…

#4

Hi @lebernd,

you just need to run docker-compose up -d while being ib /var/lib/univention-appcenter/apps/kopano-meet/compose/ (the same dir where you should have created the override file in). This will recreate all containers that are related to the change.

#5

Hi @fbartels

I don’t see any difference between:

  • no filter
  • advanced filter LDAP_FILTER=(&(objectClass=organizationalPerson)(memberOf=cn=app-meet,cn=groups,dc=int,dc=domain,dc=de))
  • simple filter LDAP_FILTER=(objectClass=organizationalPerson)

wondering if I’ve done that one the right way :man_shrugging:
But the containers seam to recreate when I change the override.

#6

Hi @lebernd,

the no difference between “no filter” and filtering for organizationalPerson is simple. It’s the default value.

Does the filter work when running it with univention-ldapsearch? Maybe the python ldap library does not do memberof?

#7

:man_facepalming:

Yes, that one I’ve checked before.

I will try something else!
Thank you!

#8

Well, no.

I’ve tried some other objectClass that reduces the search result - but I get the same list in meet.

#9

Hi @fbartels,
another idea on this contact filter thing?

#10

@lebernd sorry. Did not have further time to look into this. I would recommend to follow this up with the Kopano support.

1 Like
#11

Has anyone managed to limit the contacts displayed in Meet to a specific group?

#12

My efforts ended with what I have contributed here.

After the change of the Open-ID connector from LDAP to SAML I didn’t follow the steps to make SAML and the sso-domain available externely.
But I’m reading your posts about your efforts in this respect with some interest :+1:

Nevertheless, I think the “all user-accounts visible” setting reduces the possible use-cases quite a lot at the moment.

Mastodon