Menu ▾ ▴

#131 AD Authentication

closed
John Beranek
None
5
2012-07-20
2008-06-18
Walkden High School
No

Dear J Beranek,

At Walkden High School (a secondary/high school in Salford, UK) we would like to customise and deploy your MRBS software. I have spent a few days reading your documentation, customising the system and deploying MRBS it as a pilot in school. We do like your application but in order to implement the system site wide, with over 200 users, integrating MRBS with Micro$oft Active Directory on Windows Server 2003 is an absolute must. However, in contrast to all the other documentation released with the application I found the ‘AUTHENTICATION’ file, particular describing LDAP which I assume is the authentication type we will use, was quite sparse and somewhat confusing. Therefore, I would like to make a request for some more comprehensive documentation regarding LDAP authentication with AD. A step-by-step guide would be ideal.

If it helps with our particular case our domain is Walkden.local / Walkdenhs and our OUs are structured root (Walkden.local) > Walkden > Users > Staff
As previously mentioned it is hosted in-house on a M$ Windows Server 2003 box named lh-whs-email.

Thank you in advance for any support you are able to provide.

Regards
Walkden High School

Discussion

  • John Beranek

    John Beranek - 2008-06-24

    Logged In: YES
    user_id=71843
    Originator: NO

    In config.inc.php: (Replace all upper case sections with the appropriate content for your site)

    $auth["type"] = "ldap";

    $ldap_host = "YOUR_AD_SERVER_HOSTNAME";
    $ldap_v3 = TRUE;
    $ldap_base_dn = "YOUR_BASE_DN";
    $ldap_dn_search_attrib = "sAMAccountName";

    Then, if you don't allow anonymous searching of your AD, you'll have to specify credentials to bind to AD with for a user that can search like:

    $ldap_dn_search_dn = "MY_BIND_DN_NOW";
    $ldap_dn_search_password = "MY_BIND_PASSWORD";

    John.

     

  • John Beranek

    John Beranek - 2009-02-15

    Had no response to my answer, I'll close this request.