We're looking for forum software that will integrate with our enterprise LDAP/Active Directory server. We do not want users to manage multiple user accounts. Is LDAP integration available or planned?
Quick update: I believe that I will be able to check in the LDAP extension by the end of the week-end. I like my rewritten version much better than the 'proof of concept' code that was originally there.
LDAP authentication is available in the latest trunk check-in.
It is based on a new type of extension called 'auth'
Currently it is limited to checking that username/password can log in to an ldap server and if so, maintain a local profile in nbbs.
It is possible to setup in the ACP:
- server name or URI
- server port
- User RDN pattern (eg. cn=$1,dc=nextbbs,dc=com)
- Protocol level (2 or 3)
This should be picked up by tonight's nightly build.
I downloaded and installed the nightly build today with the new LDAP functionality (version 0.47)
First of all, thanks for your time on this!
A few points that I've noted:
I ran the install as an upgrade on a development copy of a vanilla 0.46 install
I can see the new LDAP options when in the ACP and choose "View All Settings"
I couldn't see where the new ACP option for entering the LDAP properties was located
Looking in the database though, it's clear that the new LDAP properties are stored in bb_config
For comparison I have WordPressMu installed with a php LDAP plugin which requires the following parameters
LDAP Server Address The name or IP address of the LDAP server.
LDAP Server Port Port Number of the LDAP server. (Default: Linux=389, Windows=3268)
Search DN The base DN for carrying out LDAP searches.
User DN Some systems do not allow anonymous searching for attributes.
Password Password for the privileged user.
Linux or Windows LDAP Linux Windows
Auto Create Local Accounts Yes No
Enable LDAP? Yes No
I have WordpressMu installed and working with LDAP as expected
It appears that your LDAP implementation only provides for an anonymous bind connection
Would you be able to make a change to the source to support username/password authentication to access LDAP?
nBBS should support non-anonymous LDAP binding but there is no need for a dedicated user at this point because we only provide authentication.
What are you using that User DN for?
Authentication itself:
Have you checked in ACP->Users->User Settings? You should find two sections called 'auth' where you define how your users should authenticate.
nBBS should support non-anonymous LDAP binding but there is no need for a dedicated user at this point because we only provide authentication.
What are you using that User DN for?
Authentication itself:
Have you checked in ACP->Users->User Settings? You should find two sections called 'auth' where you define how your users should authenticate.
Cheers,
-C.
Thanks Chris. I can see the LDAP properties under ACP->Users->User Settings as you've described.
I've sent you a PM in response to your first query. Let me know what you think?