<HTML dir=ltr><HEAD>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.6001.18203" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText17418 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>When I used to do systems admin on a 2k server i used a tool called Active Directory to manage the active directory? You installed it from something call admin pack and it didn't need to be ran from the server (just from an account with suitable management rights on that part of the tree / forest).</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>The only issue would be that the $entry array is what sets the firstname and surname attributes when a user is created - check you logindetails table in the database, I would assume there are two blank name fields?</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Could I ask why you are authenticating in this way - because you'll need to disable a few things as well because they only really work when there are multiple users - peer review, project sharing are two for examples.</FONT></DIV></DIV>
<DIV dir=ltr><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> xerte-bounces@lists.nottingham.ac.uk on behalf of Vince Byfield<BR><B>Sent:</B> Tue 31/03/2009 18:23<BR><B>To:</B> Xerte discussion list<BR><B>Subject:</B> [Xerte] login_library.php Script Modifications Regarding LDAP<BR></FONT><BR></DIV>
<DIV>
<DIV>Thank you Julian and Patrick for your comments and advice.</DIV>
<DIV> </DIV>
<DIV>I've decided to follow Patrick's suggestion to work within LDAP and have created a dedicated user within the Windows active directory which only edits content ('xerte_author') -- this Windows user account is used for nothing else and has never been logged in or signed in to any system other that via Xerte/LDAP. (I will have to find some LDAP administration software that will allow me to manage LDAP/Active Directory users and groups in conjunction with a customized Microsoft ASP/MSSQL user database--your suggestions for the most appropriate software to accomplish this would be appreciated).</DIV>
<DIV> </DIV>
<DIV>Meanwhile, I was able to get the LDAP authentication working after commenting out the following section of code within login_library.php:</DIV>
<DIV> </DIV>
<DIV>// ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);<BR></DIV>
<DIV>Setting this particular option generates an error response of 1 which according the MSDN/LDAP reference is LDAP_OPERATIONS_ERROR. Interestingly, if I replace the line with ldap_get_option I see that the LDAP_OPT_PROTOCOL_VERSION is already set to 3 so I commented the line out.</DIV>
<DIV> </DIV>
<DIV>and later on :</DIV>
<DIV> </DIV>
<DIV>//$entry = ldap_get_entries($ds, $sr);</DIV>
<DIV>//if(! $entry or ! $entry[0]) {<BR>// receive_message($username, "USER", "CRITICAL", "Login failed for " . $username, "Login failed for " . $username);<BR>//return false;</DIV>
<DIV>//}else {</DIV>
<DIV>{<BR><BR>$entry is presently returning an array of 0 elements. </DIV>
<DIV> </DIV>
<DIV>Once these two sections of code are commented out I am able to log in, create and edit templates with ease. Do you foresee any difficulties with keeping these customizations?</DIV>
<DIV> </DIV>
<DIV>Thanks :-)</DIV>
<DIV> </DIV>
<DIV>Vince.</DIV>
<DIV><BR> </DIV>
<DIV class=gmail_quote>On Sat, Mar 28, 2009 at 12:02 PM, Patrick Lockley <SPAN dir=ltr><<A href="mailto:Patrick.Lockley@nottingham.ac.uk">Patrick.Lockley@nottingham.ac.uk</A>></SPAN> wrote:
<BLOCKQUOTE class=gmail_quote style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV>
<DIV dir=ltr>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>I don't see ms sql and LDAP as alternatives to each other - but if you wish to use another form of authentication then you would need to modify the code in the login_library.php functions. It would be a matter of writing a select query on the password and username variables, and then seeing what it returns.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Pat</FONT></DIV></DIV></DIV></BLOCKQUOTE></DIV></DIV></BODY></HTML>