To integrate MRBS with AD, it's easier if you don't do it in MRBS. Recompile apache with mod_authnz_ldap mod_auth_basic util_ldap, configure .htaccess in the install folder for MRBS to do the AD binding... then set MRBS to use no auth and give it the variable for the username.
eg: (assuming MRBS is installed in /MRBS)
Create .htaccess in /MRBS with following content:
Code:
Order deny,allow
Deny from All
AuthName "Booking"
AuthType Basic
AuthLDAPBindDN [username with read access to ad]
AuthLDAPBindPassword [plaintext password of above user]
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPUrl "ldap://[space separated lift of DC IPs]/ou=Teaching Staff,ou=blah,dc=here,dc=internal?cn"
Require valid-user
Satisfy any
Then in MRBS' config.inc.php...
Code:
$auth["session"] = "remote_user";
$auth["type"] = "none";
unset($auth["admin"]);
$auth["admin"][] = "adminusernames";
$auth["admin"][] = "adminusernames";
$auth["admin"][] = "adminusernames";
$auth["admin"][] = "127.0.0.1"; # localhost IP address.
$auth["admin"][] = "administrator";
$auth["realm"] = "Booking";