Update upgrade_notes_for_11.0.x.md

This commit is contained in:
Daniel Pan 2024-10-17 10:59:58 +08:00 committed by GitHub
parent 76a0c881ae
commit 14becebef2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -179,12 +179,14 @@ DEL_GROUP_IF_NOT_FOUND = False # Set to "true", sync process will dele
DEL_DEPARTMENT_IF_NOT_FOUND = False # Set to "true", sync process will deleted the department if not found it in LDAP server.
```
If you use both ldap and SSO (enable LDAP user sync with ADFS/OAuth), and the uids of ldap and sso users are the same, you can configure `SSO_LDAP_USE_SAME_UID = True` to make different authentication methods point to the same Seafile user.
If you sync users from LDAP to Seafile, when the user login via SSO (ADFS or OAuth), you want Seafile to find the existing account for this user instead of creating a new one, you can set `SSO_LDAP_USE_SAME_UID = True`:
```python
SSO_LDAP_USE_SAME_UID = True
```
Note, here the UID means the unique user ID, in LDAP it is the attribute you use for `LDAP_LOGIN_ATTR` (not `LDAP_UID_ATTR`), in ADFS it is `uid` attribute. You need make sure you use the same attribute for the two settings.
#### Migrate LDAP records
Run the following script to migrate users in `LDAPImported` to `EmailUsers`