[dokuwiki] Re: LDAP authentication with AD

Hi Jacob,

The current version of the auth_ldap plugin is not working with AD, but I have just sent a patch to Andreas that fixes this, if Andreas accepts the patch I will also update the documentation to reflect how the new one works.

The new version also does not need to have a superuser to do the authentication and in general misuses the bind command less.

Until then you can get it from here:
http://tlb.rapanden.dk/auth_ldap.php.txt

# AD Auth
$conf['auth']['ldap']['server'] = 'domain.itu.dk';
$conf['auth']['ldap']['binddn'] = '%{user}@%{server}';
$conf['auth']['ldap']['usertree'] = 'dc=domain,dc=itu,dc=dk';
$conf['auth']['ldap']['userfilter'] = '(userPrincipalName=%{user}@%{server})';
$conf['auth']['ldap']['mapping']['name'] = 'displayname';
$conf['auth']['ldap']['mapping']['grps'] = array('memberof' => '/CN=(.+?),/i');
$conf['auth']['ldap']['referrals'] = 0; # Switch referrals off for use with Active Directory
$conf['auth']['ldap']['version'] = 3;

Regards
Troels.

Jakob Jensen wrote:

Hi!

I've tried to follow the guide at _http://wiki.splitbrain.org/wiki:auth_ldap_ to get dokuwiki work with my AD, but when I try to log on I get the message 'LDAP: can not bind as superuser' and 'Sorry, username or password was wrong.'. Is there anybody who knows how to make it work?

- Jakob

P.s. please forgive my bad english ;-)



--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Other related posts: