<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Verdana","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Verdana","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Verdana","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Verdana","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Verdana","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-GB link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>It wasn’t meant to replace login_library.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>Please no one do that on a proper install.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>It was a standalone LDAP tester, built around the toolkits code.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>The unable to bind message is what you want though – in theory
– it is saying, this password is wrong.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>Line 64 is what returns the entry array (the same one that you
check on line 185).<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>I’ve spent a while trying to replicate this, and it seems
like it might be that you’ve left ldap filter blank<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'>Try setting ‘dn’ back, and changing your ldap filter to
cn, or cn=<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:blue'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='margin-left:36.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Johnathan
Kemp<br>
<b>Sent:</b> 21 May 2009 13:20<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE:
[Xerte]ConfigurationofLDAPauthenticationandthelogin_library.phpfile<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-left:36.0pt'><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Hello Pat,</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Thanks for the script.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I initially commented out
the first lines that set the $xerte_toolkits_site-> values and used the
file as a replacement for login_library.php</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>This resulted in an "unable
to bind" message for line 185.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I replaced the reference to 'dn'
with sAMAccountName and then was logged in to Xerte even though the password I
supplied was incorrect, though there was an "unable to bind" message
then for line 64. I replaced the 'dn' reference again with a sAMAccountName and
that ended any further errors.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I then changed the
$xerte_toolkits_site-> lines to echo out their values.</span><o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>All the values echoed out the
matching values that are contained in the database settings for the site.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I have deleted the server settings
and dn values from the output below so as not to make them public but the
rest is as it was output.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>It appears that the connection to
ldap is working, the matching of the entered username is correctly taking place
and values from the LDAP account are being returned, but that there is no
check taking place of the password, other than that one has been entered. So as
long as you enter a valid ldap account name you are in! Any ideas as to why
this may be happening will be most welcome.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Output starts with the value
LDAP_preference, there is no value entered in our database for LDAP_filter.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Kind regards</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Johnathan</span><o:p></o:p></p>
</div>
<div><pre style='margin-left:36.0pt'><span style='color:blue'>sAMAccountName<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>(<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 0<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>)<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>(<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 0<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>)<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>(<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 0<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>)<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>(<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 0<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>)<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>(<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 1<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [0] => Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> (<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [sn] => Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> (<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 1<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [0] => Kemp<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> )<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [0] => sn<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [givenname] => Array<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> (<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 1<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [0] => Johnathan<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> )<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [1] => givenname<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [count] => 2<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> [dn] => CN=Johnathan Kemp, etc... )<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'><o:p> </o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'>)<o:p></o:p></span></pre><pre
style='margin-left:36.0pt'><span style='color:blue'> <o:p></o:p></span></pre></div>
<p style='margin-left:36.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Johnathan
Kemp<br>
IT Dev. Manager<br>
Connexions Staffordshire<br>
</span><a href="http://www.cxstaffs.co.uk/"><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>www.cxstaffs.co.uk</span></a><br>
<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>01785 355714</span><o:p></o:p></p>
<p style='margin-left:36.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:36.0pt'> <o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-left:36.0pt'><o:p> </o:p></p>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'><span
lang=EN-US>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:
12.0pt;margin-left:36.0pt'><b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Patrick
Lockley<br>
<b>Sent:</b> 20 May 2009 15:58<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte]ConfigurationofLDAPauthenticationandthelogin_library.phpfile</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Hello,<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>So if you’re using an LDAP
password that means it’s the same as we have here, and ours works.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>For reference - the
“lighter” version is without the password.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I would imagine the problem has
come with the changed code and how the LDAP seach occurs.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I’ve attached an script
with a few more options in.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Basically you’ll get LDAP
error messages (they are usually suppressed) and see the array LDAP returns.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Pat<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='margin-left:72.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Johnathan
Kemp<br>
<b>Sent:</b> 20 May 2009 15:15<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte]
ConfigurationofLDAPauthenticationandthelogin_library.phpfile<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-left:72.0pt'><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Hello Pat,</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Sorry about missing the password
bit.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>On the ldap page displayed by
management.php I have</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>An ldap password</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>The ldap base required to find the
user accounts</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>The ldap bind that uniquely
identifies the ldap account</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>ldap main filter set to
sAMAccountName</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>No value set in the ldap second
filter.</span><o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I copied the code from your
authenticate_to_host function in login_library.php and ran the code by setting
variables to provide it with the equivalent of the inputs the function expects</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Once the code is edited to replace
line 171 </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'> if(@ldap_bind($ds,
$entry[0]['dn'], $password)) {</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>with</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'> if(@ldap_bind($ds,
$entry[0]['sAMAccountName'], $password)) {</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>the code then executes returning
true from line 179 </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>It only returns true if the LDAP
password is correct and the value for $toolkits_username is a valid ldap
sAMAccountName.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>It will return true if the
value for $password is "" a wrong password or the correct password.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Is there any way I could be
running the "lighter version" without realising it?</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Kind regards</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Johnathan</span><o:p></o:p></p>
</div>
<p style='margin-left:72.0pt'> <o:p></o:p></p>
<p style='margin-left:72.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Johnathan
Kemp<br>
IT Dev. Manager<br>
Connexions Staffordshire<br>
</span><a href="http://www.cxstaffs.co.uk/"><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>www.cxstaffs.co.uk</span></a><br>
<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>01785 355714<o:p></o:p></span></p>
<p style='margin-left:72.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:72.0pt'> <o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-left:72.0pt'><o:p> </o:p></p>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'><span
lang=EN-US>
<hr size=2 width="100%" align=center>
</span></div>
</div>
<p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:
12.0pt;margin-left:72.0pt'><b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk [mailto:xerte-bounces@lists.nottingham.ac.uk]
<b>On Behalf Of </b>Patrick Lockley<br>
<b>Sent:</b> 20 May 2009 13:36<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte] Configuration
ofLDAPauthenticationandthelogin_library.phpfile</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Thank you Monaco<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Are you using an LDAP password
for the host, or the “lighter” version?<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Yours<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Terry<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:72.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='margin-left:108.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Johnathan
Kemp<br>
<b>Sent:</b> 20 May 2009 09:24<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte] Configuration
ofLDAPauthenticationandthelogin_library.php file<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-left:108.0pt'><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>OK the results of the Monaco jury
are</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>No user name / No password =
please enter your username and password</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Username wrong / password wrong
= sorry that password combination was not correct</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Username right / no password =
please enter your password</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Username right / wrong password
= successful log in</span><o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:108.0pt'> <o:p></o:p></p>
</div>
<p style='margin-left:108.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Johnathan
Kemp<br>
IT Dev. Manager<br>
Connexions Staffordshire<br>
</span><a href="http://www.cxstaffs.co.uk/"><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>www.cxstaffs.co.uk</span></a><br>
<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>01785 355714</span><o:p></o:p></p>
<p style='margin-left:108.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:108.0pt'> <o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-left:108.0pt'><o:p> </o:p></p>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'><span
lang=EN-US>
<hr size=2 width="100%" align=center>
</span></div>
</div>
</div>
<p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:
12.0pt;margin-left:108.0pt'><b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Patrick
Lockley<br>
<b>Sent:</b> 19 May 2009 13:45<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte] Configuration of
LDAPauthenticationandthelogin_library.php file</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Are supplying an LDAP password?<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Try the following combos<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>No user name / No password<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Username wrong / password wrong<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Username right / no password<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:108.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='margin-left:144.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Johnathan
Kemp<br>
<b>Sent:</b> 19 May 2009 13:45<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte] Configuration of LDAP
authenticationandthelogin_library.php file<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-left:144.0pt'><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Hello Pat,</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Many thanks for your detailed
reply. I will work through it and your reply about Xerte setup after lunch.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>I should just add that it appears
with respect to my having a working LDAP login that I spoke to soon :-(</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>With the original version of the
login_library.php file I could not log in at all.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>When I changed it to use the
sAMAccountName (the field that contains the user name we use to login on our
network) I was able to log on to my Toolkits site. However it appears that the
password is being ignored. As long as a valid sAMAccountName is entered then
you are in - whatever password you use.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>There is also an issue with the
length of the user name accepted in the login box, as the current settings are
to small. I think this has already been raised by someone else.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Any thoughts would be most
appreciated.</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Kind regards</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:blue'>Johnathan</span><o:p></o:p></p>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
</div>
<p style='margin-left:144.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Johnathan
Kemp<br>
IT Dev. Manager<br>
Connexions Staffordshire<br>
</span><a href="http://www.cxstaffs.co.uk/"><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>www.cxstaffs.co.uk</span></a><br>
<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>01785 355714</span><o:p></o:p></p>
<p style='margin-left:144.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:144.0pt'> <o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-left:144.0pt'><o:p> </o:p></p>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'><span
lang=EN-US>
<hr size=2 width="100%" align=center>
</span></div>
</div>
</div>
</div>
<p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:
12.0pt;margin-left:144.0pt'><b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Patrick
Lockley<br>
<b>Sent:</b> 19 May 2009 13:29<br>
<b>To:</b> Xerte discussion list<br>
<b>Subject:</b> RE: [Xerte] Configuration of LDAP authentication
andthelogin_library.php file</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Hello<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Ignore the installer on that
front. I need to change a line.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>You need to separate the hosts
with $$$ as the delimiter.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>As a caveat this is new
territory for an install. We’ve done a proof of concept using two LDAP
strings here, but never three. It should be scalable, but there is also the
situation at present that certain features (peer review, lockfile emails when a
shared template editor window closes) are not guaranteed to work (early
assumptions in the code limit it).<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I have been debating whether or
not to store an email in the logindetails table – but this requires
altering that table and I am a bit reluctant to do this before we release
version 1.5. It is an omission on my part, but it’s one of those problems
when developing open source is how to keep the system relatively stable.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>If you have a PHP developer
person I would suspect these modifications would take under an hour or so to
make (I could tell you precisely what to change). But you would have a slightly
custom install for a few files (index.php,
website_code/php/peer/peer_review.php and
website_code/php/versioncontrol/template_close.php) and a slightly different
login_details table.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>So for the LDAP<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I would do <o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Host1$$$Host2$$$Host3 for hosts<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Port1$$$Port2$$$Port3 for ports<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>And so on for each variable for
the LDAP settings (bind dn, basedn, password).<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Reiterating my lack of LDAP
knowledge – I don’t understand this to any great level – </span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'>sAMAccountName
– appears to be a good default academic value for searching. The case
sensitivity issues has occurred before with one install. </span><span
style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:blue'>Maybe I
could resolve this with a PHP string function of some nature.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I’ve had two people
feedback on LDAP so far (hence number of login_library bug fixes) but I am not
sure how best to proceed. I have been mulling over making a post installer test
suite – including an LDAP page to help people work out why their settings
don’t like the code. We also have the issue that we can’t predict
how IT literate people installing the code are. I think the installer does a
pretty good job at the moment, though I could see scope for it providing more
support – but these things all take time. It’s also very likely a
lot of people installing the code won’t care for LDAP as they’ll be
authenticating to something else.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I am not aware of what the LDAP
filters do, but the code needs them and they are used in the LDAP filter
function, so I called them LDAP filter 1 and LDAP filter 2. Not the most original
or informative, but again, I plead ignorance on this front. <o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I could see a case that the LDAP
function “learns”, or maybe just uses an if not statement on the
givenName attribute. My worry would be how many “given names” are
there – what do our non-English (apologies for taxonomy) LDAP usernames
appear as? <o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I don’t think you’ve
misunderstood anything either – we are just at the very edge of the code
here and I am grateful for your feedback.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>I hope this helps.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'>Pat<o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:144.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif";color:blue'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='margin-left:180.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> xerte-bounces@lists.nottingham.ac.uk
[mailto:xerte-bounces@lists.nottingham.ac.uk] <b>On Behalf Of </b>Johnathan
Kemp<br>
<b>Sent:</b> 19 May 2009 12:55<br>
<b>To:</b> xerte@lists.nottingham.ac.uk<br>
<b>Subject:</b> [Xerte] Configuration of LDAP authentication and
thelogin_library.php file<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-left:180.0pt'><o:p> </o:p></p>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Hello Xerte Team,</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>I now have a Xerte On-line Toolkits site that
I can log on to using LDAP, but I had some fun getting it set up and would like
to clarify a couple of things.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>In the site setup I have set up a single ldap
host, however I would like to have three, would the correct syntax be</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>999.999.999.999\n999.999.999.999\n999.999.999.999
</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>for this, using the \n as a separator of the
IP addresses, rather than a ";" ?</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Is it possible to specify more than one ldap
base and if so would it be correct to use "\n" as the separator
between bases?</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Is there somewhere in the setup that is
intended to specify the LDAP field that will be used in the login process, so
that when a username is entered in the login form it is matched to the correct
LDAP field when checking the user name and password against LDAP? I set
"The first LDAP filter is" box to sAMAccountName but found that the
login_library.php file was using the "dn" field to match against. It
was only after working my way back through the Xerte code that I found out why
I could not log on. I had to edit lines 48 and 171 of login_library.php to use
sAMAccountName rather than dn. Similarly lines 8 and 131 refer to
"givenname" whereas our LDAP field is "givenName" so I had
to edit these as well.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>I have to admit I am not sure what your
intended use is for the fields in the set up "The first LDAP filter"
and "The second LDAP filter".</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>How practical would it be to include in the
LDAP set up fields for the LDAP values that will be</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>a) matched to the user id entered at login</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>b) used to gather the user first name</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>c) used to gather the user last name</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>So that discrepancies between different
systems can be accommodated without the need to edit code?</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Or have I misunderstood something?</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Kind regards</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-left:180.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Johnathan</span><o:p></o:p></p>
</div>
<p style='margin-left:180.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Johnathan
Kemp<br>
IT Dev. Manager<br>
Connexions Staffordshire<br>
</span><a href="http://www.cxstaffs.co.uk/"><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>www.cxstaffs.co.uk</span></a><br>
<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>01785 355714</span><o:p></o:p></p>
<p style='margin-left:180.0pt'> <o:p></o:p></p>
<div>
<p class=MsoNormal style='margin-left:180.0pt'> <o:p></o:p></p>
</div>
<div>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'>
<hr size=2 width="100%" align=center>
</div>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='margin-left:180.0pt'>This email and any files
transmitted with it are confidential and are intended solely for the use of the
individual(s) or entity(s) to whom they are addressed. All messages are
monitored for virus, high risk files and inappropriate content. As a result
users should be aware that this mail maybe accessed, read and the right is
reserved to reject, return, remove attachments or delete if considered to be
inappropriate or unsuitable. Liability cannot be accepted for any loss or
damage arising from this email (or any attachments) or from scripts or any
virus transmitted. This communication represents the originator's personal
views and opinions, which do not necessarily reflect those of Connexions
Staffordshire. If you are not the original recipient or the person responsible
for delivering the email to the intended recipient, be advised that you have
received this email in error, and that any use, dissemination, forwarding,
printing, or copying of this email is strictly prohibited. If you received this
email in error, please immediately reply to the sender or notify
postmaster@cxstaffs.co.uk Connexions Staffordshire Limited is registered in
England No.4355170 Registered office: Foregate House, 70 Foregate Street,
Stafford, Staffordshire, ST16 2PX<o:p></o:p></p>
</div>
<div>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'>
<hr size=2 width="100%" align=center>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='margin-left:144.0pt'>This email and any files
transmitted with it are confidential and are intended solely for the use of the
individual(s) or entity(s) to whom they are addressed. All messages are
monitored for virus, high risk files and inappropriate content. As a result
users should be aware that this mail maybe accessed, read and the right is
reserved to reject, return, remove attachments or delete if considered to be
inappropriate or unsuitable. Liability cannot be accepted for any loss or
damage arising from this email (or any attachments) or from scripts or any virus
transmitted. This communication represents the originator's personal views and
opinions, which do not necessarily reflect those of Connexions Staffordshire.
If you are not the original recipient or the person responsible for delivering
the email to the intended recipient, be advised that you have received this
email in error, and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you received this email in
error, please immediately reply to the sender or notify
postmaster@cxstaffs.co.uk Connexions Staffordshire Limited is registered in
England No.4355170 Registered office: Foregate House, 70 Foregate Street,
Stafford, Staffordshire, ST16 2PX<o:p></o:p></p>
</div>
<div>
<div style='margin-left:36.0pt'>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'>
<hr size=2 width="100%" align=center>
</div>
</div>
</div>
<p class=MsoNormal style='margin-left:108.0pt'>This email and any files
transmitted with it are confidential and are intended solely for the use of the
individual(s) or entity(s) to whom they are addressed. All messages are
monitored for virus, high risk files and inappropriate content. As a result
users should be aware that this mail maybe accessed, read and the right is
reserved to reject, return, remove attachments or delete if considered to be
inappropriate or unsuitable. Liability cannot be accepted for any loss or
damage arising from this email (or any attachments) or from scripts or any
virus transmitted. This communication represents the originator's personal
views and opinions, which do not necessarily reflect those of Connexions
Staffordshire. If you are not the original recipient or the person responsible
for delivering the email to the intended recipient, be advised that you have
received this email in error, and that any use, dissemination, forwarding,
printing, or copying of this email is strictly prohibited. If you received this
email in error, please immediately reply to the sender or notify
postmaster@cxstaffs.co.uk Connexions Staffordshire Limited is registered in
England No.4355170 Registered office: Foregate House, 70 Foregate Street,
Stafford, Staffordshire, ST16 2PX<o:p></o:p></p>
</div>
<div>
<div style='margin-left:36.0pt'>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'>
<hr size=2 width="100%" align=center>
</div>
</div>
<p class=MsoNormal style='margin-left:72.0pt'>This email and any files
transmitted with it are confidential and are intended solely for the use of the
individual(s) or entity(s) to whom they are addressed. All messages are
monitored for virus, high risk files and inappropriate content. As a result
users should be aware that this mail maybe accessed, read and the right is reserved
to reject, return, remove attachments or delete if considered to be
inappropriate or unsuitable. Liability cannot be accepted for any loss or
damage arising from this email (or any attachments) or from scripts or any
virus transmitted. This communication represents the originator's personal
views and opinions, which do not necessarily reflect those of Connexions
Staffordshire. If you are not the original recipient or the person responsible
for delivering the email to the intended recipient, be advised that you have
received this email in error, and that any use, dissemination, forwarding,
printing, or copying of this email is strictly prohibited. If you received this
email in error, please immediately reply to the sender or notify
postmaster@cxstaffs.co.uk Connexions Staffordshire Limited is registered in
England No.4355170 Registered office: Foregate House, 70 Foregate Street,
Stafford, Staffordshire, ST16 2PX<o:p></o:p></p>
</div>
<div>
<div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'>
<hr size=2 width="100%" align=center>
</div>
<p class=MsoNormal style='margin-left:36.0pt'>This email and any files
transmitted with it are confidential and are intended solely for the use of the
individual(s) or entity(s) to whom they are addressed. All messages are
monitored for virus, high risk files and inappropriate content. As a result
users should be aware that this mail maybe accessed, read and the right is
reserved to reject, return, remove attachments or delete if considered to be
inappropriate or unsuitable. Liability cannot be accepted for any loss or
damage arising from this email (or any attachments) or from scripts or any
virus transmitted. This communication represents the originator's personal
views and opinions, which do not necessarily reflect those of Connexions
Staffordshire. If you are not the original recipient or the person responsible
for delivering the email to the intended recipient, be advised that you have
received this email in error, and that any use, dissemination, forwarding,
printing, or copying of this email is strictly prohibited. If you received this
email in error, please immediately reply to the sender or notify postmaster@cxstaffs.co.uk
Connexions Staffordshire Limited is registered in England No.4355170 Registered
office: Foregate House, 70 Foregate Street, Stafford, Staffordshire, ST16 2PX<o:p></o:p></p>
</div>
</div>
</body>
</html>