LDAP / Active Directory authentication

Author Message

Juan Asensio Sánchez

Monday 18 August 2008 2:38:12 am

Hi

I am very new to eZ Publish. We are evaluating eZ Publish ti implement it in some of our clients. The main requirement is the authentication against an LDAP or Active Directory Server. There is not much information about this, but my question is more general. LDAP authentication is made "on the fly"? Why is needed a script to be ran periodically?

It would be great also if anyway had example configurations of LDAP file, for Active Directory (member attribute in group definition, with full dns) and OpenLDAP (memberUid attribute in group dfinition with just the userid).

Thanks in advance.

Ivo Lukac

Monday 18 August 2008 8:58:58 am

Hello Juan,

Authentication is done on the fly using PHP LDAP functions. Cronjob syncs all users which are authenticated with LDAP.

http://www.linkedin.com/in/ivolukac
http://www.netgen.hr/eng/blog
http://twitter.com/ilukac

Juan Asensio Sánchez

Monday 18 August 2008 11:10:23 am

Hi again

Sorry, but i don't understand the process. If I configure LDAP authentication, and I run the cronjob, all users (matching filters) will be imported in the ez database and password will be checked directly against the ldap server when they login? Or the password is imported too? So, the users won't be able to login until the cronjob is first executed?

Or the user will be imported in his first login and his data (name, groups, etc) will be updated every cronjob?

Or all data is fetched directly from the ldap server when the user logins? Then, what is the cronjob function?

Excuse me my poor english, but hope you understand.

Thank you very much for your attention.

André R.

Monday 18 August 2008 1:16:43 pm

The users are imported the first time they successfully login, the password is not kept in the ez database(password are authenticated against ldap each time they login). The cronjob is to keep them in sync (first name / last name / user goups..).

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Juan Asensio Sánchez

Tuesday 19 August 2008 4:09:12 am

Ok

Thank you very much for your answers.

Regards.

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.