Help with MRBS and LDAP

[bonjour]

Hi there.

 

First time poster here, but seems like a great resource..

 

I'm currently having trouble with the excellent Meeting Room Booking System.

 

I've got it all working OK on a Windows client running XAMPP. The only problem I'm experiencing is getting LDAP authentication to work. I've got LDAP working fine with other applications, such as Ilient, but have so far been unable to get it working with MRBS.

 

Here is the authentication section from my current config.inc file. Any glaring errors that anyone can notice?

 

###############################################

# Authentication settings - read AUTHENTICATION

###############################################

$auth["session"] = "php"; # How to get and keep the user ID. One of

# "http" "php" "cookie" "ip" "host" "nt" "omni"

# "remote_user"

$auth["type"] = "ldap"; # How to validate the user/password. One of "none"

# "config" "db" "db_ext" "pop3" "imap" "ldap" "nis"

# "nw" "ext".

 

# Cookie path override. If this value is set it will be used by the

# 'php' and 'cookie' session schemes to override the default behaviour

# of automatically determining the cookie path to use

$cookie_path_override = '';

 

# The list of administrators (can modify other peoples settings)

$auth["admin"][] = "127.0.0.1"; # localhost IP address. Useful with IP sessions.

$auth["admin"][] = "administrator"; # A user name from the user list. Useful

$auth["admin"][] = "ross"; #with most other session schemes.

$auth["admin"][] = "ictsupport";

 

#$auth["admin"][] = "10.0.0.1";

#$auth["admin"][] = "10.0.0.2";

#$auth["admin"][] = "10.0.0.3";

 

# 'auth_config' user database

# Format: $auth["user"]["name"] = "password";

$auth["user"]["administrator"] = "***";

$auth["user"]["spollard"] = "***";

$auth["user"]["schetcuti"] = "pass";

$auth["user"]["ross"] = "pass";

$auth["user"]["jfossey"] = "pass";

$auth["user"]["ictsupport"] = "***";

 

# 'session_http' configuration settings

$auth["realm"] = "mrbs";

 

# 'session_remote_user' configuration settings

#$auth['remote_user']['logout_link'] = '/logout/link.html';

 

# 'auth_ext' configuration settings

$auth["prog"] = "";

$auth["params"] = "";

 

# 'auth_db_ext' configuration settings

$auth['db_ext']['db_host'] = 'localhost';

$auth['db_ext']['db_username'] = 'authuser';

$auth['db_ext']['db_password'] = 'authpass';

$auth['db_ext']['db_name'] = 'authdb';

$auth['db_ext']['db_table'] = 'users';

$auth['db_ext']['column_name_username'] = 'name';

$auth['db_ext']['column_name_password'] = 'password';

# Either 'md5', 'sha1', 'crypt' or 'plaintext'

$auth['db_ext']['password_format'] = 'md5';

 

# 'auth_ldap' configuration settings

# Where is the LDAP server

$ldap_host = "aps-sr-001.alexandrap.internal";

# If you have a non-standard LDAP port, you can define it here

#$ldap_port = 389;

# If you want to use LDAP v3, change the following to true

$ldap_v3 = false;

# If you want to use TLS, change following to true

$ldap_tls = false;

# LDAP base distinguish name

# See AUTHENTICATION for details of how check against multiple base dn's

$ldap_base_dn = "ou=Establishments,dc=alexandrap,dc=internal";

$account_suffix = "@alexandrap.internal";

# Attribute within the base dn that contains the username

$ldap_user_attrib = "sAMAccountName";

 

# 'auth_ldap' extra configuration for ldap configuration of who can use

# the system

# If it's set, the $ldap_filter will be combined with the value of

# $ldap_user_attrib like this:

# (&($ldap_user_attrib=username)($ldap_filter))

# After binding to check the password, this check is used to see that

# they are a valid user of mrbs.

$ldap_filter = "mrbsuser=y";

 

# 'auth_imap' configuration settings

# See AUTHENTICATION for details of how check against multiple servers

# Where is the IMAP server

$imap_host = "aps-sr-001";

# The IMAP server port

$imap_port = "143";

 

# 'auth_pop3' configuration settings

# See AUTHENTICATION for details of how check against multiple servers

# Where is the POP3 server

#$pop3_host = "pop3-server-name";

# The POP3 server port

#$pop3_port = "110";

 

I can't see where it picks up the admin username and password to authenticate with the LDAP server.

 

Any help much appreciated.

 

Ta.

[Domino]

http://edugeek.net/index.php?name=Forums&file=viewtopic&p=103369#103369

 

a search would have brought this up

[bonjour]

Indeed it did my friend.

 

I have used that and still no joy.

 

Maybe I should have specified that in my original post.

[Domino]

And you've checked your LDAP version and ports?

 

You need to specify if you're running ldap V3 or on a non-standard port.

 

also your FQDN has ".internal" at the end - I assume this is something you've set up as the default would of course be ".local"

[bonjour]

Yes. Our network is set up as 'internal' rather than local. Like I said, I've set up LDAP with other applications previously with no issues (using 'internal').

 

Thanks for your help mate. I'll keep plugging away.

[plexer]

.local .internal makes no difference some people advocate against using .local and really using a proper fqdn.

 

Ben

[Jockl]

Hi!

 

We are setting up a system for teachers at our old school and want to use

MRBS as reservation system for rooms, laptops etc. As the school is a

Windows 2003 Server network we want to authorize the users via LDAP. After

weeks we got to work this on Joomla but it doesn't work with MRBS.

 

This is the configuration of MRBS:

 

// Where is the LDAP server

$ldap_host = "ibc.ac.at";

// If you have a non-standard LDAP port, you can define it here

$ldap_port = 389;

// If you do not want to use LDAP v3, change the following to false

$ldap_v3 = true;

// If you want to use TLS, change the following to true

$ldap_tls = false;

// LDAP base distinguish name

// See AUTHENTICATION for details of how check against multiple base dn's

$ldap_base_dn = "OU=L,OU=Benutzer,DC=ibc,DC=ac,DC=at";

// Attribute within the base dn that contains the username

$ldap_user_attrib = "sAMAccountName";

 

When I try to login it says: Unknown User

 

Configuration of Joomla:

 

Here a screenshot from the settings in Joomla:

 

http://www.ibc.ac.at/pic1.jpg

 

When doing an authentication test in Joomla we get some warnings but login

works.

 

http://www.ibc.ac.at/pic2.jpg

 

http://edugeek.net/index.php?name=Forums&file=viewtopic&p=103369#103369

 

a search would have brought this up

This link doesn't work anymore.

 

Thanks!

 

Jockl

[Geoff]

.local .internal makes no difference some people advocate against using .local and really using a proper fqdn.

 

Ben

 

Not relevant to this thread, but I'm sure Google's spiders will appreciate it. The reason that you shouldn't use .local is because it's used internally by Mac OSX and it's Bonjour network location system. Bonjour might also be installed on Windows PCs with iTunes installed. So if you have these sorts of systems installed you can't use .local without breaking/confusing them.

 

Back to your LDAP stuff...

[Geoff]

Oh here's my MRBS LDAP config. It works. The AD server is W2k8, but that shouldn't matter for the purposes of this example.

 

// 'auth_ldap' configuration settings
// Where is the LDAP server
$ldap_host = "zeus.carrhill.lancs.sch.uk";
// If you have a non-standard LDAP port, you can define it here
$ldap_port = 389;
// If you do not want to use LDAP v3, change the following to false
$ldap_v3 = true;
// If you want to use TLS, change the following to true
$ldap_tls = false;
// LDAP base distinguish name
// See AUTHENTICATION for details of how check against multiple base dn's
$ldap_base_dn = "OU=All Users,DC=carrhill,DC=lancs,DC=sch,DC=uk";
// Attribute within the base dn that contains the username
$ldap_user_attrib = "sAMAccountName";
// If you need to search the directory to find the user's DN to bind
// with, set the following to the attribute that holds the user's
// "username". In Microsoft AD directories this is "sAMAccountName"
$ldap_dn_search_attrib = "sAMAccountName";
// If you need to bind as a particular user to do the search described
// above, specify the DN and password in the variables below
$ldap_dn_search_dn = "CN=MRBS,OU=Service Accounts,OU=All Users,DC=carrhill,DC=lancs,DC=sch,DC=uk";
$ldap_dn_search_password = "*********";

 

I am using MRBS 1.4.1

[DanW]

Geoff - is your MRBS install on a linux box?

[Geoff]

Yes it is.

[sharmilee]

Hi, I am having the same problem with the authentication. My config file is in line with the one shown above.

 

What could be wrong??