LDAP configuration in Koha3.0 on Linux
Hi, I am trying to configure Koha3.0 on Linux(Ubuntu) to use our LDAP server. I referred to the below link for configuration: http://wiki.koha.org/doku.php?id=en:development:ldap&s Our LDAP server does not provide any field name for password and hence I am not able to map in the koha_conf.xml file. Also, please let me know if there is any other file that I need to modify to succeed in configuring for this. Can someone please help me in resolving this issue since I am unable to understand the flow of this authentication process. Thanks and Regards, Sai. This email and any attachment(s) transmitted may contain confidential, proprietary or legally privileged information relating to D&B TransUnion Analytic and Decision Services Private Limited. The information is intended solely for the recipient. No part of this information may be disclosed, copied, reproduced, distributed or made available in any form whatsoever without prior authorization. If you have received this email in error please notify the sender electronically and delete all copies immediately. This email may contain viruses. D&B TransUnion Analytic and Decision Services Private Limited has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this email. We strongly advise you to ensure that the email and any attachment(s) are free of any virus.
On Tue, Jul 14, 2009 at 06:43:43PM +0530, Sai bhalaji Dhinakaran wrote:
Hi,
I am trying to configure Koha3.0 on Linux(Ubuntu) to use our LDAP server. I referred to the below link for configuration:
http://wiki.koha.org/doku.php?id=en:development:ldap&s
Our LDAP server does not provide any field name for password and hence I am not able to map in the koha_conf.xml file. Also, please let me know if there is any other file that I need to modify to succeed in configuring for this.
Can someone please help me in resolving this issue since I am unable to understand the flow of this authentication process.
We had similar problem, so we opted to implement following ugly patch: http://koha-dev.rot13.org:8081/cgi-bin/gitweb.cgi?p=koha-ffzg.git;a=commitdi... (which I should really cleanup and submit at some point in future). Idea is simple: instead of having single administrative user which can do LDAP compare to check password, we just bind as user who is trying to login. Tricky part is rewrite of user login@domain.com into LDAP DN syntax (uid=login,dc=domain,dc=com), but if this patten is o.k. for most users (I hope). If it's not, please speak now! :-) -- Dobrica Pavlinusic 2share!2flame dpavlin@rot13.org Unix addict. Internet consultant. http://www.rot13.org/~dpavlin
Dobrica Pavlinusic <dpavlin@rot13.org> writes:
Idea is simple: instead of having single administrative user which can do LDAP compare to check password, we just bind as user who is trying to login.
Yes, this is the correct way to authenticate against an LDAP directory. As you say, it requires no privileged access to the directory beyond that granted to the authenticating user. This normal behaviour (bind as authenticating user) is available in the current development tree of Koha 3.x, and is not yet in any stable release TTBOMK. -- \ Rommel: “Don't move, or I'll turn the key on this can of Spam!” | `\ —The Goon Show, _Rommel's Treasure_ | _o__) | Ben Finney
participants (3)
-
Ben Finney -
Dobrica Pavlinusic -
Sai bhalaji Dhinakaran