Search the Community

I have an apache 2.2.11 server with php 5.2.9 and mysql 5.1.34 running on 64bit windows server 2k3. i have enabled the ldap extensions within php, but am not sure on how to use the ldap stuff, what i would like it to do is to pick up the users system login details and display their username. once i have got that i would like to deny access to pages depending on which ad group they are in, which i don't know how to do either.

I am keen to build an intranet site for our secondary school, we have no money to spend on expert help so I have to go it alone. I envisage the site being a sharing site for staff and students, news, canteen menu, gallery for photos and videos etc, and a secure area for staff only, containing forms, room bookings and so on. I have toyed with a Joomla site with some success but my stumbling block is the secure area that requires an LDAP lookup, I have spent hours configuring SHMANIC jmapmyldap, only to find it too flaky for words. As soon as I thought I had it configured correctly one minor change threw it off track, now I've lost faith in it. I am wondering if someone can point me in the right direction, I am not entirely sold on Joomla, I'm quite happy to learn a new system if necessary. Many thanks

Hello all - After searching and not turning up anything relevant I decided to post a question on here. My situation is this: We are an AD shop. We have numerous Ricoh devices that I have never touched and, the way I understand it, users accounts are currently setup one-by-one in each device's local address book. Users can print and scan documents to their H: drives. Their ricoh mailbox account is setup with folder authentication with their AD username and password manually entered in the web console by a tech. The folder path is the UNC path to the person's H: drive. This works well, although cumbersome. My problem is that we are going to be enforcing 90 day password changes starting next week and users will get failed authentications when trying to scan after their password changes. I understand that the Ricoh can work with AD and has LDAP authentication. My first question is, with Windows or LDAP authentication setup, how will the user be able to change their password in the address book? I'm assuming they do it right on the scanner? Secondly, can LDAP or Windows Authentication pull the user's home directory attribute in their user account? What I want is an easy way for the end users to be able to change their password on the ricoh, or even be prompted for their password when scanning a document to their h: drive. That said, do I even need to turn on LDAP authentication to get what I want? It would be great if new users could walk up, enter their ad username and password, and scan a doc right to their h: drive. Is this possible? Thanks for your help in advance. EDIT: I have also read that a way around the password change issue is to set the scanning up with a generic account who's password never changes and give it access to everyone's H: drive, thus eliminating the need for the each user to enter their username and pw. I don't prefer this method, but I was curious if anyone else has gone this route?

I'm well on my way with my first Moodle installation on Windows. I've worked through LDAP authentication - MoodleDocs and set up LDAP. New user accounts are not being created. If I log on as a new user, I just get "Invalid login, please try again", no other errors are displayed. I thought that will LDAP configured, Moodle would look up new users when they try to log on and set up their accounts as necessary - is this not right? I think I'm supposed to set up a cron job to automate LDAP synchronisation. I've installed MoodleCron, and it appear to be working, runing the standard cron job. How do I add another cron job to sync LDAP?

Good morning all. I apologise for making a thread which comes up fairly regularly on here but I'm at a loss as to where I am going wrong. I've read through many of the threads on here on this topic, and compared my config with other but I can't see where I am going wrong. I have MRBS running in a testing environment on my workstation. Windows 7 IIS 7, PHP 5.4.3 and PHP manager installed from the Platform web installer. LDAP extension has been enabled from within the PHP Manager. The domain controller I'm trying to authenticate against is a Windows 2008 R2 server. My MRBS authentication config from config.inc.php is as follows; // Authentication // Where is the LDAP server $ldap_host = "sdc02.sjc.ac"; //DC 2 //$ldap_port = 389; $ldap_v3 = true; $ldap_tls = false; // LDAP base distinguish name $ldap_base_dn[] = "OU=SEN,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Science,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=RE,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=PE,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Music,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=MFL,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Mathematics,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Mandarin,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=ICT,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=History,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Geography,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=FoodTech,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=English,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=DT,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=CoverSupervisors,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=BusinessStudies,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Art,OU=Teaching,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Administration,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_base_dn[] = "OU=Technical,OU=Staff,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_dn_search_attrib = "sAMAccountName"; $ldap_dn_search_dn = "CN=Administrator,CN=Users,DC=sjc,DC=ac"; $ldap_dn_search_password = "*****"; $ldap_filter = "memberof=CN=mrbs_admins,OU=Groups,OU=Users,OU=Managed,DC=sjc,DC=ac"; $ldap_get_user_email = TRUE; $ldap_email_attrib = "mail"; $ldap_unbind_between_attempts = FALSE; $ldap_debug = TRUE; All the LDAP DN's have been copied directly from Sysinternals AD Explorer so they should be correct. I'm trying to test logging in with my user which is a member of the technical OU and also a member of the mrbs_admins group specified in the ldap_base_dn. When I attempt to login I'm just given the message "Unknown user". I'm not sure where to look for any logs or diagnostic information about what is happening. Can anyone see any glaring omissions from my config or can anyone tell me how I can get more detailed diagnostic information as to what is happening behind the scenes during my authentication request? Regards, John

Openfiler LDAP settings when configured to the LDAP server on Win 2003 server, the authorization error is being shown, Please configure the LDAP section of the Authentication page before attempting to use this page. Error message: ldap_bind: Invalid credentials (49) additional info: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece But when checking the box of use Local LDAP server , 127.0.0.1 local NIC ip. The authorization is opening but with no User List, and if someone could help me out with AD integration on Openfiler that would be a Great help.. Thank You

Hi Is anyone using Alfresco as an alternative to Sharepoint? I am looking at this and would like to integrate it with our active directory and user spaces but I have read the notes and it seems daunting. Has anyone set up this type of system and could they offer any tips as to how I could do this on our site. Thanks

Hi, I am new to configuration of LDAP and Moodle. I installed the OpenLDAP 2.4.40 on Linux Centos 6 and configured it successfully using this link. Then I got to another Link which provides the configuration of LDAP Server Authentication on Moodle 3.2. After implementing all the configuration, the login to the Moodle using a LDAP user is not working knowing that all the configurations are applied as documented in the above links. I installed the Apache Directory Studio and configure the connection to the LDAP Server successfully. Hereafter is a snapshot of the LDAP Server Tree: Then I got to the LDAP server installed in Linux thru using putty tool and run the "ldapsearch -x -LLL -b dc=sorce,dc=online" and it works fine. My Moodle Authentication configuration parameters of LDAP Server are as follows: Distinguished Name - bind user is set to the Root User: cn=Manager,dc=sorce,dc=online User Type: posixAccount (rfc2307) Context is set to the "users" entry: ou=Users,dc=sorce,dc=online All the passwords are double checked However, after implementing all the above configurations, I`m still not able to connect to Moodle using LDAP Users, and I got the following error: LDAP-module cannot connect to any servers: Server: '80.79.155.44', Connection: 'Resource id #82', Bind result: '' My Moodle installation is hosted in a cloud account, the LDAP Server is installed in a local office server (Linux Centos 6), and the Apache Directory Studio is installed in my PC (Windows 7) Any ideas regarding how I can make Moodle authenticate LDAP Users and login..please help? Thanks in advance!

Currently setup a new moodle test site (Linux – SME Server 8). To try and get moodle to authenticate against Active Directory. I have used Softerra LDAP Browser 2.6 to try and get the correct LDAP setting in place. I believe I now have correct LDAP setting in place. As in with LDAP settings it does not error out with message like: LDAP-module cannot connect to any servers: Server: 'ldap://10.107.16.2' Connection: 'Resource id #49' Bind result: '' However every time I try logging in with AD user. I get the following message. "Invalid login, please try again" Running Server 2008 for AD I was wondering whether anyone knows of a simple fix to get this to work correctly. Settings are as followed for: Distinguished Name: CN=LDP USER,OU=Accounts,DC=curric,DC=local User type = MS AD Contexts: OU=Intake 10,OU=Students,OU=Accounts,DC=curric,DC=local Search subcontexts = Yes

I'm using LDAP authentication with no problems for user accounts in GLPI. But now I'm trying to get GLPI Groups to link to my LDAP groups. I can do the 'import' fine however the groups do not have any users in them. I used the settings from here: GLPI-Wiki/wiki/doku.php?id=en:ldap directory My settings are: Search Type : In Users User Attributes containing groups : memberof Filter to search in groups : (objectClass=*) Group Attributes Containing Users : Has anyone got this working?

Hi. I am having difficulty in Binding to an LDAP in Moodle. I have successfully created a BIND to a user, but the login searches under display names to authenticate, meaning that users have to type in their display name(S) (NAME AND SURNAME) instead of their user names to login to a moodle site. PLeaase help. How do i get the LDAP to search and authenticate against usernames instead of display names.

Hi Guys and Girls, Just wondering if someone could give some advice re integration of Active Directory with Joomla!, have already downloaded jdiagnostics but realise I need to get the site off Xammp and properly installed onto IIS. I'm running Win Server 2008R2 and have installed other websites via IIS but need help with Joomla!. Can anyone point me in the right direction please ? Thanks in advance, Andrew