[Xerte] Using toolkits with LDAP

[Patrick Lockley]

Website_code/login_top – set the max length value in the form to be higher J

 

What do people think is a good max length – 30 would seem to cover it?

 

I could make it an option – but it’s an odd option.

 

I’ll make those two fixed strings as option variables then, does anyone know enough LDAP to suggest a good default value for the installer?

 

From: xerte-bounces at lists.nottingham.ac.uk [mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Peter Huppertz
Sent: 10 March 2009 12:06
To: Xerte discussion list
Subject: RE: [Xerte] Using toolkits with LDAP

 

Thanks for the info. Indeed the hardcoded filter 'sAMAccountName' was the problem. In my case the filter attribute is 'cn'. I think it depends on the ldap template you use. So I guess it would make sense to add the filter attribute to the variable settings in the setup. Even more because some people perhaps would like to use the email-address or another attribute for authentication. 
Also the input field for the username does not allow more than 12 letters. In my case this is too short. 

Peter 



From: 

Patrick Lockley <Patrick.Lockley at nottingham.ac.uk> 

To: 

"Xerte discussion list" <xerte at lists.nottingham.ac.uk> 

Date: 

10.03.2009 11:25 

Subject: 

RE: [Xerte] Using toolkits with LDAP 

Sent by: 

xerte-bounces at lists.nottingham.ac.uk

 

________________________________




I’m not an LDAP expert, so I’ve just used some standard code. 
  
Xerte does know what to look for, but it’s possible that the structure that’s worked previously is different from yours. 
  
If there are any settings that are different, you’ll find them in the valid_login function in website_code/php/login_library.php. 
  
The only fixed strings are 
  
$ldap_filter_attr = 'sAMAccountName'; 
$ldap_search_attr = array('firstname' => 'givenname', 'lastname' => 'sn'); 
  
  
From: xerte-bounces at lists.nottingham.ac.uk [mailto:xerte-bounces at lists.nottingham.ac.uk <mailto:xerte-bounces at lists.nottingham.ac.uk> ] On Behalf Of Julian Tenney
Sent: 10 March 2009 09:34
To: Xerte discussion list
Subject: RE: [Xerte] Using toolkits with LDAP 
  
I’ll let Pat chime in here, but it would definitely be worthwhile trying this with the pre-release version of toolkits we now have ready for final testing out in the community. We can send you the files, or make a link available. If others have access to a server and would like to try the pre-release version please let us know. We’d like to give a people a chance to discover any issues there might be in rolling this out to disparate systems, 
  
I’ll ask Pat to zip it all up and put some installation instructions together. We would like to have version 1.0 completed by the end of this week, so any final feedback would be brilliant, 
  
Many thanks, 
  
J 
  
From: xerte-bounces at lists.nottingham.ac.uk [mailto:xerte-bounces at lists.nottingham.ac.uk <mailto:xerte-bounces at lists.nottingham.ac.uk> ] On Behalf Of Peter Huppertz
Sent: Tuesday, March 10, 2009 8:13 AM
To: xerte at lists.nottingham.ac.uk
Subject: [Xerte] Using toolkits with LDAP 
  
Dear List, 

I installed toolkits 0.9 from the website in my local XAMPP. I also have a working locale installation of OpenLDAP (Mac OS X). The structure is as follows: 

dc=example,dc=com 
  ou=people 
      cn=user1 

In Xerte I use the following settings: 

$site->ldap_host = "ldap://localhost"; 
$site->ldap_port = 389; 

$site->bind_pwd="supersecret"; 
$site->basedn="dc=example,dc=com"; 
$site->bind_dn = 'cn=Manager,dc=example,dc=com'; 

When I try to login with "user1" Xerte it tells me: "Sorry that password combination was not correct". 
I think Xerte doesn't know which attribute to look for the username?! 

Peter_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte <http://lists.nottingham.ac.uk/mailman/listinfo/xerte> 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.nottingham.ac.uk/pipermail/xerte/attachments/20090310/dacb15c1/attachment.html