I dont know how to integrate my eZ Publish with my LDAP Server

Tuesday 18 May 2004 9:12:25 am

Hi All!!!

I am trying to integrate my eZ Publish with my LDAP Server but it isn´t working.. :-(

My system:

Red Hat Linux 9
Apache/1.3.27
PHP/4.3.2
Mysql/4.0.13
eZ Publish/3.4.0beta1
LDAP Server: Active Directory on Windows 2003
Company Domain: ceb.unicamp.br
LDAP Server name: real.ceb.unicamp.br

LDAP support in PHP is enable, I compiled with "--with-ldap" configuration option...

I followed all steps on "Using LDAP server"
http://www.ez.no/ez_publish/documentation/configuration/configuration/login_handler/using_ldap_server document to configure my ldap.ini file, but I know that I did some mistake... :(

I created a <ez dir>/settings/override/site.ini.append.php with:

[UserSettings]
#LoginHandler[]=standard
<b>LoginHandler[]=LDAP</b>

And I created a <ez dir>/settings/override/ldap.ini.append.php file with following content..

<?php /* #?ini charset="iso-8859-1"?

[LDAPSettings]
# Set to true if use LDAP server
LDAPEnabled=true
# LDAP host
<b>LDAPServer=real.ceb.unicamp.br</b>
# Port nr for LDAP, default is 389
LDAPPort=389
# Specifies the base DN for the directory.
<b>LDAPBaseDn=ou--informatica,o--ceb,o--unicamp,o--br</b>
# Could be sub, one, base.
LDAPSearchScope=sub
# Use the equla sign to replace "=" when specify LDAPBaseDn or LDAPSearchFilters
LDAPEqualSign=--
# Add extra search requirment. Uncomment it if you don't need it.
# Example LDAPSearchFilters[]=objectClass--inetOrgPerson
LDAPSearchFilters[]
# LDAP attribute for login. Normally, uid
LDAPLoginAttribute=uid
# Could be id or name
LDAPUserGroupType=id
# Default place to store LDAP users. Could be content object id or group name for LDAP user group,
# depends on LDAPUserGroupType.
<b>LDAPUserGroup=12</b>
# LDAP attribute type for user group. Could be name or id
LDAPUserGroupAttributeType=name
# LDAP attribute for user group. For example, employeetype. If specified, LDAP users
# will be saved under the same group as in LDAP server.
<b>LDAPUserGroupAttribute=employeetype</b>
# LDAP attribute for First name. Normally, givenname
LDAPFirstNameAttribute=givenname
# LDAP attribute for Last name. Normally, sn
LDAPLastNameAttribute=sn
# LDAP attribute for email. Normally, mail
LDAPEmailAttribute=mail
# LDAP encoding is utf-8 or not
# Utf8Encoding=false
*/ ?>

I don&acute;t know if my ldap.ini.append.php file is right!!! (Please help with it)

After I did these modifications I opened my site on web browser and tried to login in it with a username and password of my LDAP Server... But it didn&acute;t work, I couldn&acute;t to access my site and appeared the message:

Could not login
A valid username and password is required to login

<b>I did nothing after to modify the both ldap.ini.append.php and site.ini.append.php file...</b>

I need to modify anything in my eZ Publish?
I need to create anything???

PLEASE, What Can I do to my eZ Publish works with my LDAP Server????

I tried to use the eZ Publish 3.3-5, but it didn&acute;t work too.

I saw all message in http://ez.no/content/search?SearchText=LDAP but I didn&acute;t find the answer...

I have a squid proxy in my Linux authenticating in this LDAP Server and it is working fine!

Thanks a lot!
Leandro