LDAP / Active Directory authentication

Monday 18 August 2008 2:38:12 am

Hi

I am very new to eZ Publish. We are evaluating eZ Publish ti implement it in some of our clients. The main requirement is the authentication against an LDAP or Active Directory Server. There is not much information about this, but my question is more general. LDAP authentication is made "on the fly"? Why is needed a script to be ran periodically?

It would be great also if anyway had example configurations of LDAP file, for Active Directory (member attribute in group definition, with full dns) and OpenLDAP (memberUid attribute in group dfinition with just the userid).

Thanks in advance.

Monday 18 August 2008 11:10:23 am

Hi again

Sorry, but i don't understand the process. If I configure LDAP authentication, and I run the cronjob, all users (matching filters) will be imported in the ez database and password will be checked directly against the ldap server when they login? Or the password is imported too? So, the users won't be able to login until the cronjob is first executed?

Or the user will be imported in his first login and his data (name, groups, etc) will be updated every cronjob?

Or all data is fetched directly from the ldap server when the user logins? Then, what is the cronjob function?

Excuse me my poor english, but hope you understand.

Thank you very much for your attention.

Tuesday 19 August 2008 4:09:12 am

Ok

Thank you very much for your answers.

Regards.