#14 AD Multidomain logins

[Anonymous]

Hi,
We have a single forest / multidomain AD setup and I wanted to allow users login from all the domains so I modified the code as follows: (Diff)
Commentif this is of any use....

--- ldap.inc.php-original 2011-10-13 15:11:12.000000000 +0100
+++ ldap.inc.php-multidomain 2011-10-18 14:49:24.000000000 +0100
@@ -38,6 +38,26 @@

function authenticate($login,$password) {
$result = false;
+
+ // parse login to see if includes domain.
+ //
+ if (preg_match("/@/",$login)) {
+ // Full domainName is user@domain format
+ $loginArray = split("@",$login);
+ $login = strtolower($loginArray[0]);
+ $domain = strtolower($loginArray[1]);
+
+ $this->config['host'] = $this->config[$domain]['host'];
+ $this->config['domain'] = $this->config[$domain]['domain'];
+ $this->config['basedn'] = $this->config[$domain]['basedn'];
+ $this->config['userdn'] = $this->config[$domain]['userdn'];
+ $this->config['groupdn'] = $this->config[$domain]['groupdn'];
+
+ }else {
+ // Use default domain entries
+ // do nothing
+ }
+
/ just to be sure /
$this->disconnect();
if ($this->connect()) {
@@ -57,23 +77,33 @@
return $result;
}

-
function userinfo($login) {
$result = array();
+
+ //
+ // Full domainName is user@domain format
+ //
+ if (preg_match("/@/",$login)) {
+ // Full domainName is user@domain format
+ $loginArray = split("@",$login);
+ $login = strtolower($loginArray[0]);
+ }
+
if ($this->connect() and $this->bind()) {

while in the config file I set up the following entries.....

$CONFIG['ldap']['host'] = 'defaultDomain.local';
$CONFIG['ldap']['domain'] = 'defaultDomain.local';
$CONFIG['ldap']['basedn'] = 'dc=XXX,dc=XXX,dc=local';
$CONFIG['ldap']['userdn'] = 'ou=XXX,dc=XX,dc=XXX,dc=local';
$CONFIG['ldap']['groupdn'] = 'ou=XXXX,dc=XX,dc=XXX,dc=local';

$CONFIG['ldap']['domain1.local']['host'] = 'xxxx.domain1.local';
$CONFIG['ldap']['domain1.local']['domain'] = 'domain1.local';
$CONFIG['ldap']['domain1.local']['basedn'] = 'dc=XX,dc=domain1,dc=local';
$CONFIG['ldap']['domain1.local']['userdn'] = 'dc=ie,dc=domain1,dc=local';
$CONFIG['ldap']['domain1.local']['groupdn'] = 'dc=ie,dc=domain1,dc=local';

$CONFIG['ldap']['domain2.local']['host'] = 'xxxx.domain1.local';
$CONFIG['ldap']['domain2.local']['domain'] = 'domain1.local';
$CONFIG['ldap']['domain2.local']['basedn'] = 'dc=domain1,dc=local';
$CONFIG['ldap']['domain2.local']['userdn'] = 'ou=Users,dc=domain2,dc=local';
$CONFIG['ldap']['domain2.local']['groupdn'] = 'ou=Groups.dc=domain2,dc=local';

etc....

[Anonymous]

Hi,
Really need the same implementation but I'm not able to have it working. Could you attach the 3 modified working files (removing private info)?
Regards.

[Anonymous]

it would be nice to have it working for login in the form of DOMAINNAME\USERNAME