LDAP - How to

Next topic

Author	Message
luis muñoz	Monday 11 July 2005 7:25:04 am Hi, i,m trying to setup ez to work with an ldap server but it seems to be not too easy. I have a few questions. Is there any up to date tutorial or documentation on how to set up ez to work with ldap? I mean step by step, for people wich never used an LDAP server before. Do i have to create any thing in the LDAP server? I mean classes, specific structure... When a new user is created in ez, is it replicated in LDAP autoomatically, duplicated with a cron, or not duplicated? How can i check if ez is comunicating with LDAP or i misconfigured ez or LDAP? Looks like no error/access log is created in ez, openldap or system log Thank you for your help Luis
luis muñoz	Wednesday 13 July 2005 6:15:29 am In ldap.ini, what is the correct value for the lines: LDAPSearchScope=sub # Use the equla sign to replace "=" when specify LDAPBaseDn or LDAPSearchFilters LDAPEqualSign=-- # Add extra search requirment. Uncomment it if you don't need it. # Example LDAPSearchFilters[]=objectClass--inetOrgPerson LDAPSearchFilters[] # LDAP attribute for login. Normally, uid LDAPLoginAttribute=uid # Could be id or name LDAPUserGroupType=id # Default place to store LDAP users. Could be content object id or group name for LDAP user group, # depends on LDAPUserGroupType. LDAPUserGroup[] # LDAP attribute type for user group. Could be name or id LDAPUserGroupAttributeType=name # LDAP attribute for user group. For example, employeetype. If specified, LDAP users # will be saved under the same group as in LDAP server. LDAPUserGroupAttribute=employeetype # LDAP attribute for First name. Normally, givenname LDAPFirstNameAttribute=givenname # LDAP attribute for Last name. Normally, sn LDAPLastNameAttribute=sn # LDAP attribute for email. Normally, mail LDAPEmailAttribute=mail # LDAP encoding is utf-8 or not Utf8Encoding=false I cannot find documentation on this and need to make it work.
kracker (the)	Wednesday 13 July 2005 2:58:37 pm I can't seem to find the post now but I know there have been a few really good contributions to the forums regarding this subject. Specifically I remember a post that was basically a step by step explanation on how another developer accomplished this ... So, I'd say use google to read every LDAP mention on ez.no, it might take a while but I know you'll learn a lot if you do the reading. http://www.google.com/search?num=50&hl=en&lr=&safe=off&c2coff=1&q=site%3Aez.no+LDAP+HowTo&btnG=Search Also this forum post wasn't the one I was looking for but was detailed... http://ez.no/community/user_groups/ezug_edu/forum_of_ezug_edu/creating_av_secure_ldap_enabled_ez_site http://home2.hit.no/~jonnybe/eZ/docs/creating_secure_authentication.pdf Member since: 2001.07.13 \|\| http://ezpedia.se7enx.com/

Author

Message

Monday 11 July 2005 7:25:04 am

Hi,
i,m trying to setup ez to work with an ldap server but it seems to be not too easy. I have a few questions.

Is there any up to date tutorial or documentation on how to set up ez to work with ldap? I mean step by step, for people wich never used an LDAP server before.

Do i have to create any thing in the LDAP server? I mean classes, specific structure...

When a new user is created in ez, is it replicated in LDAP autoomatically, duplicated with a cron, or not duplicated?

How can i check if ez is comunicating with LDAP or i misconfigured ez or LDAP? Looks like no error/access log is created in ez, openldap or system log

Thank you for your help

Luis

luis muñoz

Wednesday 13 July 2005 6:15:29 am

In ldap.ini, what is the correct value for the lines:

LDAPSearchScope=sub
# Use the equla sign to replace "=" when specify LDAPBaseDn or LDAPSearchFilters
LDAPEqualSign=--
# Add extra search requirment. Uncomment it if you don't need it.
# Example LDAPSearchFilters[]=objectClass--inetOrgPerson
LDAPSearchFilters[]
# LDAP attribute for login. Normally, uid
LDAPLoginAttribute=uid
# Could be id or name
LDAPUserGroupType=id
# Default place to store LDAP users. Could be content object id or group name for LDAP user group,
# depends on LDAPUserGroupType.
LDAPUserGroup[]
# LDAP attribute type for user group. Could be name or id
LDAPUserGroupAttributeType=name
# LDAP attribute for user group. For example, employeetype. If specified, LDAP users
# will be saved under the same group as in LDAP server.
LDAPUserGroupAttribute=employeetype
# LDAP attribute for First name. Normally, givenname
LDAPFirstNameAttribute=givenname
# LDAP attribute for Last name. Normally, sn
LDAPLastNameAttribute=sn
# LDAP attribute for email. Normally, mail
LDAPEmailAttribute=mail
# LDAP encoding is utf-8 or not
Utf8Encoding=false

I cannot find documentation on this and need to make it work.

kracker (the)

Wednesday 13 July 2005 2:58:37 pm

I can't seem to find the post now but I know there have been a few really good contributions to the forums regarding this subject.

Specifically I remember a post that was basically a step by step explanation on how another developer accomplished this ...

So, I'd say use google to read every LDAP mention on ez.no, it might take a while but I know you'll learn a lot if you do the reading.
http://www.google.com/search?num=50&hl=en&lr=&safe=off&c2coff=1&q=site%3Aez.no+LDAP+HowTo&btnG=Search

Also this forum post wasn't the one I was looking for but was detailed...
http://ez.no/community/user_groups/ezug_edu/forum_of_ezug_edu/creating_av_secure_ldap_enabled_ez_site
http://home2.hit.no/~jonnybe/eZ/docs/creating_secure_authentication.pdf

Member since: 2001.07.13 || http://ezpedia.se7enx.com/

eZ debug

Timing:	Jan 18 2025 15:18:59
Script start
Timing:	Jan 18 2025 15:18:59
Module start 'layout'
Timing:	Jan 18 2025 15:18:59
Module start 'content'
Timing:	Jan 18 2025 15:19:00
Module end 'content'
Timing:	Jan 18 2025 15:19:00
Script end

Main resources:

Total runtime	0.7997 sec
Peak memory usage	4,096.0000 KB
Database Queries	57

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0063	587.7891	152.6094
Module start 'layout'	0.0063	0.0072	740.3984	39.3984
Module start 'content'	0.0135	0.7849	779.7969	540.2031
Module end 'content'	0.7984	0.0013	1,320.0000	12.2031
Script end	0.7997		1,332.2031

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0038	0.4717	16	0.0002
Check MTime	0.0015	0.1862	16	0.0001
Mysql Total
Database connection	0.0008	0.1028	1	0.0008
Mysqli_queries	0.7447	93.1219	57	0.0131
Looping result	0.0006	0.0810	55	0.0000
Template Total	0.7602	95.1	2	0.3801
Template load	0.0024	0.3023	2	0.0012
Template processing	0.7577	94.7520	2	0.3789
Template load and register function	0.0002	0.0250	1	0.0002
states
state_id_array	0.0011	0.1426	1	0.0011
state_identifier_array	0.0013	0.1649	2	0.0007
Override
Cache load	0.0020	0.2534	24	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0008	0.0942	2	0.0004
Fetch class attribute name	0.0013	0.1672	4	0.0003
XML
Image XML parsing	0.0009	0.1148	2	0.0005
class_abstraction
Instantiating content class attribute	0.0000	0.0009	4	0.0000
General
dbfile	0.0009	0.1097	18	0.0000
String conversion	0.0000	0.0020	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
3	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
3	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
6	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
1	content/datatype/view/ezxmltags/literal.tpl	<No override>	extension/community/design/standard/templates/content/datatype/view/ezxmltags/literal.tpl
1	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 16 Number of unique templates used: 7

Time used to render debug report: 0.0002 secs