Hi,

I saw some issues about Webserver authentication and LDAP, but they're old...

Does anyone can give me an updated info about how to setup an automatically login using LDAP?

Thanks,
Carlos

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

brandon.dixon’s picture

I am able to get automatic login via LDAP with just installing the module and configuring it. What specifically are you looking for?

verta’s picture

I'm looking for automatic login with LDAP combined with the role synchronization of the LDAP_integration module.

boilermaker.jb1’s picture

This is something I am working on integrating into the webserver_auth modules. However, considering this needs to work with all types of webserver authentication I am hesitant to allow role synchronization with only LDAP configured authentication. Currently the webserver_auth module does not allow the behaviour. I have had success on individual installations modifying the code to allow the login process to sync with an LDAP server ( normally AD ).

boilermaker.jb1

verta’s picture

LDAP Integration http://drupal.org/project/ldap_integration does role sync, so if the modules will co-exist happily, that will be good enough. Although I would like it better if the removal from roles not found in AD was optional, so I can keep accounts in Drupal-only roles.

I am agreeing with leaning towards it being "out of scope" for your module.

I am in the process of testing this module (webserver_auth) with that one (LDAP Integration) to try to get "single sign on" for our intranet. I want the Windows authentication to take them into the site with the correct Drupal and AD roles, with no stopping at the login form for authentication, which they seem to have to do with the LDAP Integration module.

Happy to run dev versions of both and post reports here!

boilermaker.jb1’s picture

I have used the LDAP integration module in the past and it does not co-exist happily like you want it too. It will require the user to login in twice, once into the webserver auth and secondly into the drupal install. I will gather the code for you, and post it as a patch on this thread. As a side product, I have the code to sync the email addresses with AD so the drupal install will be able to email your users.

For your information I developed this code on Linux servers running apache 2.2 and php 5.3 with the --with-ldap switch enabled. If you have successfully used the ldap_integration module then I would assume that the code I have written will work just fine.

It will take me a few days to gather the code I would assume by Monday of next week so 2/1/2010, I can have a patch file for you.

boilermaker.jb1

verta’s picture

Thanks, boilermaker.jb1 - I am running Windows, and the instructions for installing a patch are more than I can follow right now.

So, no rush on my account, although if it meant that someday there would be a way for these two modules to hand off control cleanly, I would brave the patch process.

verta’s picture

To clarify - "automatic" to me means that the user does not have to put in their userid and password into the user/login screen - they are already logged into Windows and the domain via AD. It's not automatic if I have to type it, is my point.

boilermaker.jb1’s picture

Sorry for the long wait on a response, at this point if you don't want the user to have to type it in automatically IE has a setting to pass integrated windows auth to a website.

Instructions are available here:

https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/...
https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/...

I apologize I am not a Windows genius but I believe those 2 technet articles will help you on your way to this particular goal. The site has to be trusted as an intra net site and integrated windows authentication has to be enabled in the advanced tab in internet options (tools-internet options).

I'm still working on sucking stuff out of AD.

boilermaker.jb1’s picture

FileSize
2.64 KB
boilermaker.jb1’s picture

This zip file will synch roles with A.D. and automatically add the users to the roles. Let me know how well it works.

mstrelan’s picture

@boilermaker.jb1: Are you aware of this thread for the ldap_integration project?
#324732: Webserver authentication

Perhaps you could join forces with the maintainer of that module so we can get these two modules to coexist happily

verta’s picture

Agreed, the LDAP Integration project also supports profile field data updates from LDAP, a real plus that we can't really do without (Real Names).

gaards’s picture

Issue summary: View changes
Status: Active » Closed (outdated)

Closed because Drupal 6 is no longer supported. If the issue verifiably applies to later versions, please reopen with details and update the version.