Difference between revisions of "Admin ldap"

From TUTOS

m (Reverted edits by DomdoMdoma (Talk); changed back to last version by TatroCalca)
Line 1: Line 1:
[http://hobbiesguinea.com/images/thumbs/article2426.html liter to m3] [http://radiopromo2000.com/wp-content/uploads/2008/06/article66.html x-men legends] [http://larrieperkins.com/wp-content/uploads/2007/index.html map] [http://adsideas.com/wp-content/uploads/2009/08/thumbs/resource-1526.html i aint no quitter video] [http://upoms.net/map/images/topic-454.html imovie plugins] [http://mygoaholidays.com/hotels/thumbs/news-297-2009-08-04.html free person search] [http://wonderfulindia.com/rajjasholidays/new/img/article73.html andi pink movie] [http://vta.bg/backups/dump/index.htm page] [http://stschool.org/calendar/flash/article-1977.htm play internet poker online] [http://sahara-art-venture.nl/cms/cmsimages/icons/sitemap.htm webmap] [http://sisprohosting.com/clients/downloads/media/text2093.htm boston red sox] [http://caricomstats.org/statsphpbb/images/pics/article2216.html panty stuffing movie] [http://larrieperkins.com/wp-content/uploads/2007/article1912.html vacation rental properties] [http://saovicente.art.br/fotosst/data/media/5/icons/article1255.html and if you want to buy me flowers lyrics] [http://wonderfulindia.com/rajjasholidays/new/img/article1091.html night of the comet movie] [http://bytebox.co.uk/livechat/web/chat/index.html site] [http://adventure.bg/blog/wp-content/uploads/2007/10/ricfut1583.htm cleveland clinic diet] [http://sahara-art-venture.nl/cms/cmsimages/icons/topic-1696.htm citizens insurance] [http://nefin.org.np/files/media/topic-467.htm splenectomy guidelines] [http://valoes.com.br/blog/media/blogs/c/text233.htm punk sex] [http://best-event.org/pics/gallery/thumbs/new1497.htm gaming pc] [http://larrieperkins.com/wp-content/uploads/2007/article638.html keith richards drug] [http://sindsprevpb.org.br/artigos/sendtmp/819/text1347.htm free fight song ringtones] [http://mygoaholidays.com/hotels/thumbs/index.html links] [http://fundacionsignes.org/gno/attachments/images/article541.html shower in public] [http://valoes.com.br/blog/media/blogs/c/text317.htm average movie ticket price 2004] [http://sahara-art-venture.nl/cms/cmsimages/icons/topic-107.htm inspirational gift co.] [http://smartjobs.in/files/media/topic-1530.htm adult indian movie download] [http://bgoferta.com/dogs/dogs/files/article2428.html movie spielberg steven transformer] [http://hobbiesguinea.com/images/thumbs/sitemap.html index] [http://smartjobs.in/files/media/topic-964.htm realplayer video clip] [http://stschool.org/calendar/flash/article-1372.htm cell phone ringtone tone voice] [http://fundacionsignes.org/gno/attachments/images/article873.html house of wax 2004] [http://elias-sport.com/images/sports/thumbs/index.html webmap] [http://icct20.com/wp-content/uploads/2007/10/page315.html listing of quentin tarantino movies] [http://guineahobbies.com/images/Image/test/pics/text-1351.htm svc dll] [http://caricomstats.org/statsphpbb/images/pics/article1670.html only free movies.com] [http://shipping.org.gy/new/wp-content/uploads/2009/03/sitemap.html domain] [http://thetechbuzz.net/mamatech/wp-content/uploads/2008/page811.html significado de nombres hebreos] [http://doherty.net.au/blog/wp-content/uploads/2007/news-873-2009-08-18.html license nurse registered verification] [http://rangoli27.com/blog/wp-content/uploads/2009/index.html http] [http://hamburger-bildungsserver.de/hera/img/pic/news-546-2009-08-15.html mobile media player serial number] [http://larrieperkins.com/wp-content/uploads/2007/article1825.html equipos de videoconferencia] [http://bytebox.co.uk/livechat/web/chat/news-420-20090820.html kate ritchie video clips] [http://stschool.org/calendar/flash/article-656.htm atr-72 for sale] [http://expedia.bg/images/icons/2752.html olympic game woman] [http://larrieperkins.com/wp-content/uploads/2007/article582.html saved movie songs] [http://icct20.com/wp-content/uploads/2007/10/page453.html goblin] [http://showbread.net/music/sound/comment-670.html pontiac solstice videos] [http://shipping.org.gy/new/wp-content/uploads/2009/03/page-2194.html military only loan] 
 
[http://pkdance.gr/images/pixels/topic103.htm fiber optic stars] [http://pkdance.gr/images/pixels/topic1211.htm make up artist movie] [http://www.bottlesandcans.com/uploads/images/resource-579.html methamphetamines] [http://addiehf.com/photo/wp-content/uploads/2008/news-2821-20090730.html tennis upskirt gallery] [http://popcreativo.com/galerias/fotos/thumbs/page2583.html image movie outsider] [http://islachayanne.org/beach/Themes/theme2/topic-1767.html to calculate percent yield] [http://vagoslatinamerica.com/site/slideshow/pics/article604.html blonde mom] [http://acdhh.org/uploads/media/article1565.html ah my goddess the movie download] [http://www.bibliopolio.gr/images/banners/mini/topic-2299.htm ewave] [http://transmatch.com/osCommerce/images/pics/new1145.htm sampras pics] [http://hamphauercanes.com/fax/files/article243.html qantas domestic flights in new zealand] [http://acdhh.org/uploads/media/article2504.html merck] [http://silverglaze.com/wp-content/uploads/2009/06/news-664-2009-07-24.html disaster recovery planning] [http://www.juliensuvalde.com/skin1/pages/files/article501.html retinal necrosis] [http://uexplore.us/uploads/thumbs/pics/2533.html duke of hazzard ringtone verizon] [http://blognoviny.cz/images/pixels/1284.html alcohol effects side wellbutrin] [http://giiblog.com.br/wp-content/uploads/2008/09/text-674.htm oscar mayer] [http://thesmileshack.com/store/pub/files/index.htm site] [http://addiehf.com/photo/wp-content/uploads/2008/news-1404-20090718.html need for speed underground 2 nocd crack by reloaded] [http://areahp.com.br/bolsa/img/thumbs/new1520.htm video editor] [http://miteyriders.com/dev/wordpress/wp-content/images/news-1814-20090723.html ji seong korean] [http://cbhr.com/dmdocuments/docs/article246.html alt.sex.stories] [http://elusivemoose.com/ssp_director/albums/album-25/page2520.html objective experimentation] [http://branchensuche24.info/acp/inc/files/article129.html audiovox cdm8910 ringtone] [http://elusivemoose.com/ssp_director/albums/album-25/page240.html modify movie] [http://transmatch.com/osCommerce/images/pics/new769.htm hill king ringtone] [http://www.bibliopolio.gr/images/banners/mini/topic-1495.htm sylvia panda] [http://dnsline.com/soporte/attachments/media/comment-996.html pockettunes deluxe] [http://hamphauercanes.com/fax/files/article1119.html hawaiian bracelets] [http://lamontweb.com/AdvancedGuestBook/public/images/page1160.html sweet valley high] [http://griffiths.com/blog/wp-content/uploads/2007/news-793-2009-07-24.html macroscale and microscale organic experiments solutions] [http://mldesignstudios.com/store/pub/files/article1200.html salt lake tribune movie database] [http://nycity-hits.com/banners/small/sitemap.html url] [http://mldesignstudios.com/store/pub/files/article1323.html mouse cartoon movie] [http://elusivemoose.com/ssp_director/albums/album-25/page178.html activation code larry leisure suit uncut] [http://heartoftheweb.net/photoblog/wp-content/uploads/2008/ricrell.htm young breast] [http://luxutah.com/wp-content/uploads/2009/02/article-2333.htm paul dominick] [http://abanganden.co.cc/wp-content/uploads/2008/11/article-1561.htm movie rocket team] [http://thesmileshack.com/store/pub/files/enoralda.htm scream the movie images] [http://dear.com.ve/img/wallpapers/thumbs/page513.html playboy free video preview] [http://creating.com.ve/correo/data/files/article1127.htm ls1 camaro videos] [http://luxutah.com/wp-content/uploads/2009/02/article-94.htm paint shop pro crack code] [http://thesoulplanet.com/rssbox/cache/temp/page349.html promise and peril of international trade] [http://areahp.com.br/bolsa/img/thumbs/new119.htm rock salt] [http://hamphauercanes.com/fax/files/sitemap.html page] [http://blognoviny.cz/images/pixels/1342.html mp3 sound cutter 1.41 crack] [http://blognoviny.cz/images/pixels/406.html drusilla] [http://saddlebrooktv.com/forum/images/avatars/pics/news-1127.html movie in lincoln ne] [http://www.thyroidproblems.net/data/files/sitemap.html page] [http://dnsline.com/soporte/attachments/media/comment-987.html amc movie.com] 
 
[http://page.freett.com/semenserpent/23.html los angeles zip code] [http://colotroc.0lx.net/133.html bus tours to nascar race] [http://treasdew.strefa.pl/163.html one way car rentals in acapulco mexico] [http://page.freett.com/prajenik/24.html adware personal se] [http://s1.shard.jp/peter1610/473.html hawaii vacation home rentals] [http://aldelmon.0lx.net/421.html hawaii honeymoon romantic] [http://s1.shard.jp/pchykeeen/795.html dollar rent car] [http://s1.shard.jp/pchykeeen/587.html discounted vacation packages to bahamas] [http://colotroc.0lx.net/407.html car cheap company heathrow rental] [http://s1.shard.jp/chrisglass/21.html cheap bus travel] [http://eltzwetoz.strefa.pl/93.html florida hospital tampa veteran] [http://ricjatrxr.strefa.pl/352.html arkansas jonesboro junk yard] [http://qawetfev.strefa.pl/382.html northern european cruise] [http://s1.shard.jp/samsamych/index.html links] [http://ricjatrxr.strefa.pl/498.html arkansas chamber commerce rogers] [http://s1.shard.jp/celare/789.html floridas discount hotel deals] [http://s1.shard.jp/peter1610/852.html holiday travel of america] [http://s1.shard.jp/xmarina/130.html aaa car discount rental] [http://treasdew.strefa.pl/378.html outer banks vacation home rentals] [http://s1.shard.jp/commodore/104.html club quarters midtown] [http://s1.shard.jp/chrisglass/815.html cheapest europe tour vacation package] [http://treasdew.strefa.pl/146.html one way airline ticket] [http://rocxacwe.strefa.pl/393.html california image self] [http://ricjatrxr.strefa.pl/235.html arkansas dept of health] [http://etwuaqfa.strefa.pl/108.html locals advice travel san diego] [http://zwegaaqer.strefa.pl/281.html colorado landlord tenant act] [http://page.freett.com/xela86/index.html map] [http://s1.shard.jp/samsamych/491.html asia travel agent] [http://rocxacwe.strefa.pl/157.html california tunnels] [http://retapelko.0lx.net/198.html blue collar comedy tour tickets] [http://aldelmon.0lx.net/184.html hawaii big island tour] [http://cowmonel.0lx.net/202.html michigan direct student loans] [http://page.freett.com/johnathanwny/index.html map] [http://nrcaqasq.0lx.net/113.html kansas city plaza picture] [http://etxfuviba.0lx.net/294.html car rental places at eagle county airport] [http://darfiqas.0lx.net/94.html illinois cd rate] [http://elletolao.0lx.net/20.html all inclusive vacation packages north carolina] [http://s1.shard.jp/pchykeeen/548.html discounted airline fares] [http://page.freett.com/zenkoala/index.html links] [http://page.freett.com/zenkoala/2.html spyware finder] [http://s1.shard.jp/commodore/813.html crystal falls inn] [http://page.freett.com/semenserpent/453.html marriott hotels and resorts] [http://retapelko.0lx.net/51.html best time to travel in italy] [http://etxfuviba.0lx.net/280.html car rental orlando] [http://treasdew.strefa.pl/119.html omni royal crescent hotel new orleans] [http://qedrqplbu.strefa.pl/201.html luxury rental cars san francisco] [http://etwuaqfa.strefa.pl/301.html los angeles county library] [http://s1.shard.jp/pchykeeen/576.html discounted hotel rates in kauai] [http://cowmonel.0lx.net/330.html michigan lupus foundation] [http://s1.shard.jp/celare/501.html extended stay hotels phoenix arizona] 
 
[http://alraauta.mukade.jp/334.html unlisted phone] [http://freshwpearls.com/bubbleblog/media/2/975.html illinois physician license verification] [http://freshwpearls.com/bubbleblog/media/2/337.html power 105.1] [http://takasui.net/pta/data/2010.3/files/news-113-2009-08-06.html mythological names] [http://freshwpearls.com/bubbleblog/media/2/1884.html my jal nextel ringtones] [http://doakoxa.suppa.jp/article202.html no credit check rentals] [http://hiv.gov.gy/tmp/files/article547.html laser engraver] [http://evamoon.net/blog/wp-content/uploads/2006/text-311.htm programa para capturar video] [http://evamoon.net/blog/wp-content/uploads/2006/text-1038.htm illinois insurance agent licensing] [http://takasui.net/pta/data/2010.3/files/news-200-2009-07-30.html sex robot] [http://miyako-wakamaru.com/main/archives/2009/05/img/zarqasba649.htm dilly] [http://peakdocs.com/ac/images/pics/article692.html angeles listing los movie] [http://divertigenio.es/bk_subscription/files/news-2726-20090807.html travel advisories] [http://brenondr.mukade.jp/index.html domain] [http://peakdocs.com/ac/images/pics/index.html http] [http://ioj-japan.org/modules/eguide/css/comment-360.html easy money review] [http://peakdocs.com/ac/images/pics/article2436.html preoperative care] [http://e-miroku.jp/attach/files/new2020.htm free verizon lg vx4400b ringtones] [http://folkvlvog.ashigaru.jp/article665.html simple and clean] [http://faeasdr.konjiki.jp/64.html amber michaels] [http://easfevwi.konjiki.jp/index.html kayla kleevage] [http://ifanepal.org.np/images/icons/article75.htm train birthday party supplies] [http://fevtroct.wakatono.jp/page465.html boost mobile phone prepaid] [http://hiv.gov.gy/tmp/files/article1677.html lawnboy lawnmower parts] [http://politonomist.com/wp-content/uploads/2007/page-763.html panochas] [http://fafafaric.biroudo.jp/page-640.html wish you were here] [http://www.seniorlendersreversemortgage.com/script/files/topic1400.htm internet statistics] [http://seancochran.com/images/thumbs/page1604.html airline tickets to pakistan] [http://inkoorle.0lx.net/index.html http] [http://fawuafa.konjiki.jp/page714.html computer sale] [http://northerndaylily.com/wpThumbnails/pics/comment-467.html provisional licence] [http://a1club.net/award/mailform/data/files/article2483.html like moment music this video] [http://folkvlvog.ashigaru.jp/article377.html the hun yellow pages] [http://merundoi.org.gy/blog/wp-content/uploads/podpress_temp/img/basbug.htm cocks and pussy] [http://triexcellence.com/qapro/registration/files/article1189.html abk music video] [http://triexcellence.com/qapro/registration/files/article561.html yosemite hotels] [http://exelib.com/webmasters/files/news-2574-20090803.html vita guerrera pics] [http://folkvlvog.ashigaru.jp/article698.html julie ann gerhard] [http://northernlightsdaylilies.com/GardenDesigns/media/flash/page527.html age of empires crack xp] [http://roowiraas.zouri.jp/index.html sitemap] [http://aleastr.amigasa.jp/index.html url] [http://www.seniorlendersreversemortgage.com/script/files/topic246.htm cartoon bestiality] [http://zonvone.ojaru.jp/677.html leanna foxxx] [http://a1club.net/award/mailform/data/files/article281.html commonwealth bank of australia] [http://bugfvfa.himegimi.jp/article615.html gucci purse] [http://a1club.net/award/mailform/data/files/article1118.html room air conditioner] [http://exelib.com/webmasters/files/news-1715-20090806.html avant makin good love music video] [http://zezqeacke.xxxxxxxx.jp/66.html gina lynn] [http://triexcellence.com/qapro/registration/files/article2172.html male genital exam videos] [http://folkvlvog.ashigaru.jp/index.html index] 
 
 
= Setting up LDAP Authentication =
 
= Setting up LDAP Authentication =
  
Line 22: Line 18:
 
:On some LDAP servers, you will have to connect as admin to be able to get the password info. Once connected as an admin, you get the user informations just as in the anonymous bind case.
 
:On some LDAP servers, you will have to connect as admin to be able to get the password info. Once connected as an admin, you get the user informations just as in the anonymous bind case.
  
Of course, for each of those cases, the password can be stored « as is » or encrypted.
+
Of course, for each of those cases, the password can be stored « as is » or encrypted.
  
 
== How to configure it ==
 
== How to configure it ==

Revision as of 09:36, 1 October 2009

Setting up LDAP Authentication

The way it works

To be able to authenticate your TUTOS users with a LDAP server, you will have first to configure the way to authenticate via this server, then to create the TUTOS users.

There's not one way of doing LDAP authentication, and you will need to know how LDAP is configured on your server to be able to configure it for TUTOS.

The scheme is always the same, you send the user name and password to the server, and it will accept or reject the connection. But here's 3 diferents ways of doing that with a LDAP server :

  1. Anonymous bind
You connect as the anonymous user on the LDAP server, then you retrieve the user name and passwd, in order to compare them to the given values ;
  1. User bind
You try to connect the LDAP server directly with the given user name and passwd, and you will get an accept or reject response ;
  1. Admin bind
On some LDAP servers, you will have to connect as admin to be able to get the password info. Once connected as an admin, you get the user informations just as in the anonymous bind case.

Of course, for each of those cases, the password can be stored « as is » or encrypted.

How to configure it

After reading the first part, the config options should be easy to set up. So here are the parts of the config file to edit :

config.pinc : enable the LDAP authentication

# LDAP configuration
#
# 0 = check standard database
# 1 = check ldauthserver for password verification 
$tutos[ldapauth] = 0;

config.pinc : say if the passwords are encrypted or not

# encrypted passwords 
# 1 = yes
$tutos[ldapauth_pw_enc] = 1;

config.pinc : The server host and port parameters...

$tutos[ldapauthserver]['host'] = "scd2ldap.siemens.net";
$tutos[ldapauthserver]['port'] = 389;

config.pinc : LDAP paths

$tutos[ldapauthserver]['basedn'] =  "ou=mail,ou=user,o=cvf";
$tutos[ldapauthserver]['userdn'] = "uid";

LDAP paths, without such an info you can't find the user infos on the server. If you don't know those values, just ask your LDAP admin. Here the userdn is the last part of the DN, in the example given we would find :

uid=username,ou=mail,ou=user,o=cvf

We still have to separate those values because of the way LDAP search and binding works.

config.pinc : LDAP auth for server connection

# use given user/passwd pair to bind the LDAP server 
# 0 = no
# 1 = yes
$tutos[ldapauth_user] = 0;

If you set this option, we will use the user name and password to connect to the LDAP tree.

config.pinc : LDAP anonymous server connection

# do anonymous bind to ldpauthserver
# 1 = yes
# 0 = use tutos[ldapauthserver]['binddn']
#     and tutos[ldapauthserver]['passwd']
$tutos[ldapauth_anonymous] = 1;

Here you can choose to make an anonymous bind to the LDAP server...

config.pinc : LDAP anonymous server connection

$tutos[ldapauthserver]['binddn'] = "ou=adminprs,ou=ldap,ou=user,o=cvf";
$tutos[ldapauthserver]['passwd'] = "h4ckm3";

In the case you would have to bind the LDAP server as an admin, you will have to provide another LDAP path, wich correspond to the admin (or say, privileged user) username. Then there is his password.

Adding the users to the tutos database

Now you have set up the authentication process, you still can't use TUTOS. In fact you can login, but nothing happens. You have to create TUTOS users with the same login as the LDAP ones.

I've made a php script to do that, ldap_getdata.php in php/admin directory. As LDAP structure can be really different from one company to another, this script is far from generic, but works well here !

You should make it fit with your own LDAP structure and then get all the wanted user to be created in TUTOS. If you have any clue about how to make this script generic, please feel free to contribute, by either sending us a patch, or telling us how to do that.