Forum

LDAP configuration
 
Notifications
Retirer tout

LDAP configuration

4 Posts
3 Utilisateurs
0 Reactions
11.3 {numéro}K Vu
CRESSON
(@thierrc49)
Posts: 97
Active Member
Début du sujet
 
[#542]

Hello Babynus,

I have an issue when I'm trying to configure the LDAP service. I have done the configuration in parameter.php but nothing change there are no connection to LDAP server.

now i'm on Linux OS whit apache + PHP5

Have you got any tuto or tips & tricks to implement this feature including the php / apache configuration if need 🙂

Thanks
Thierry,


 
Posté : 30 Mai PM 15:055
CRESSON
(@thierrc49)
Posts: 97
Active Member
Début du sujet
 

I have increase the log deep parameter and have this msg
2012-05-30 14:58:57 ** ERROR ** ERROR **
2012-05-30 14:58:57
** ERROR ** on file '/var/www/projectorria 2.2.2/model/User.php' at line (527)
2012-05-30 14:58:57
** ERROR ***** cause = ldap_bind(): Unable to bind to server: Invalid credentials
2012-05-30 14:58:57 ===== TRACE ===== authenticate - LdapBind Error
2012-05-30 14:58:57 ===== TRACE ===== Error contacting Ldap for user 'so_creth'

any idea?
Thx
Thierry,


 
Posté : 30 Mai PM 17:055
(@spiderjn)
Posts: 35
Active Member
 

Hi

this problem is related to reading rights on the LDAP directory to find if there exists user, you need define a user (with this right) :

look in files/config/parameter.php file:

$ paramLdap_search_user = 'cn = Manager, dc = mydomain, dc = com';
$ paramLdap_search_pass = 'secret';

best regards


 
Posté : 30 Mai PM 18:055
(@babynus)
Posts: 14952
Membre Admin
 

Hi,
I confirm spiderjn analysys. (Thanks !)

I can complete it.
To have Ldap interface you must define :

 $paramLdap_allow_login=true;
 $paramLdap_base_dn = "the dn base for your users in the Ldap structure"
 $paramLdap_host = "name or IP of the LDAP server, default is localhost"
 $paramLdap_port = "port used to the Ldap server, default is 389"
 $paramLdap_search_user = "a valid dn of user to connect to Ldap server"
 $paramLdap_search_pass = "password of above user"
 $paramLdap_user_filter = "a Ldap filter that will be used to find user in Ldap from user name (login)"

The tool connects to Ldap with account $paramLdap_search_user/$paramLdap_search_pass.
Then searches for user using $paramLdap_user_filter (%USERNAME%" in the filter is replace by the user entered in the login screen).
If user is found, try to connect (bind) to Ldap with account dn="dn of the found user" and password = password from login screen.
Note : if user does not exist yet in Project'Or RIA, it is created, with minimum rights (guest). This must then be changed afterwards by admin.

Hope this helps.


 
Posté : 30 Mai PM 21:055
Share:
Retour en haut