LDAP / Active Directory authentication

Author Message

Juan Asensio Sánchez

Monday 18 August 2008 2:38:12 am

Hi

I am very new to eZ Publish. We are evaluating eZ Publish ti implement it in some of our clients. The main requirement is the authentication against an LDAP or Active Directory Server. There is not much information about this, but my question is more general. LDAP authentication is made "on the fly"? Why is needed a script to be ran periodically?

It would be great also if anyway had example configurations of LDAP file, for Active Directory (member attribute in group definition, with full dns) and OpenLDAP (memberUid attribute in group dfinition with just the userid).

Thanks in advance.

Ivo Lukac

Monday 18 August 2008 8:58:58 am

Hello Juan,

Authentication is done on the fly using PHP LDAP functions. Cronjob syncs all users which are authenticated with LDAP.

http://www.linkedin.com/in/ivolukac
http://www.netgen.hr/eng/blog
http://twitter.com/ilukac

Juan Asensio Sánchez

Monday 18 August 2008 11:10:23 am

Hi again

Sorry, but i don't understand the process. If I configure LDAP authentication, and I run the cronjob, all users (matching filters) will be imported in the ez database and password will be checked directly against the ldap server when they login? Or the password is imported too? So, the users won't be able to login until the cronjob is first executed?

Or the user will be imported in his first login and his data (name, groups, etc) will be updated every cronjob?

Or all data is fetched directly from the ldap server when the user logins? Then, what is the cronjob function?

Excuse me my poor english, but hope you understand.

Thank you very much for your attention.

André R.

Monday 18 August 2008 1:16:43 pm

The users are imported the first time they successfully login, the password is not kept in the ez database(password are authenticated against ldap each time they login). The cronjob is to keep them in sync (first name / last name / user goups..).

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

Juan Asensio Sánchez

Tuesday 19 August 2008 4:09:12 am

Ok

Thank you very much for your answers.

Regards.

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 18 2025 19:03:17
Script start
Timing: Jan 18 2025 19:03:17
Module start 'layout'
Timing: Jan 18 2025 19:03:17
Module start 'content'
Timing: Jan 18 2025 19:03:18
Module end 'content'
Timing: Jan 18 2025 19:03:18
Script end

Main resources:

Total runtime0.7367 sec
Peak memory usage4,096.0000 KB
Database Queries65

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0062 589.1563152.6406
Module start 'layout' 0.00620.0035 741.796939.4766
Module start 'content' 0.00970.7254 781.2734599.9922
Module end 'content' 0.73510.0015 1,381.265612.1406
Script end 0.7367  1,393.4063 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00380.5129160.0002
Check MTime0.00140.1950160.0001
Mysql Total
Database connection0.00090.124710.0009
Mysqli_queries0.667190.5457650.0103
Looping result0.00090.1161630.0000
Template Total0.693294.120.3466
Template load0.00250.337020.0012
Template processing0.690793.751020.3453
Template load and register function0.00020.032210.0002
states
state_id_array0.00160.221110.0016
state_identifier_array0.00080.112920.0004
Override
Cache load0.00210.2886250.0001
Sytem overhead
Fetch class attribute can translate value0.00150.198130.0005
Fetch class attribute name0.00140.191970.0002
XML
Image XML parsing0.00160.216130.0005
class_abstraction
Instantiating content class attribute0.00000.001970.0000
General
dbfile0.00300.4084240.0001
String conversion0.00000.001340.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
5content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
5content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
2content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 14
 Number of unique templates used: 5

Time used to render debug report: 0.0001 secs