Hi all,
please note that there might be different ways of attacking the LDAP authentication problem. I created a separate thread for discussion of these. Maybe that increases the number of people that are willing to contribute?

Regards,

Martin

Hi guys,
i enhanced the plugin-functionality a little bit to get it working with M$-AD under the current piwigo-release (2.7.4) to authenticate users of a given group.

i uploaded the whole plugin with my changes to https://github.com/spelth/Ldap_Login

WHAT IS MISSING: a did not find out how to get rid of the "not compatible"-warning on the piwigo plugin-page. but it actually works in my environment since January without any problems.

BUT NOTICE: i will not provide any support for this plugin, you'll find support here: [Github] Ldap_Login file README.md.
The only thing i'm interested in is to get rid of the "Not-supported" warning and maybe to port it back to the piwigo plugin repo to provide an easy way of installing it.

have fun.

xbgmsharp wrote:

don't forget to increase the version number.

or replace by "Version: auto" in main.inc.php

Hi f1.4,

Great work! works also to authenticate against a OpenLDAP (Mac OS X Server) instance again.

However, the function ldap_search_dn required a minor fix (which I expect to work against AD as well as it's now consistent with other search patterns:

diff --git a/class.ldap.php b/class.ldap.php
index 530f8d7..0113d4b 100644
--- a/class.ldap.php
+++ b/class.ldap.php
@@ -167,7 +167,7 @@ class Ldap {
        // return userdn (and username) for authentication
        public function ldap_search_dn($value_to_search){
                $this->write_log("[function]> ldap_search_dn(".$value_to_search.")");
-               $filter = '(&(objectCategory=person)('.$this->config['ld_attr'].'='.$value_to_search.'))';
+               $filter = '(&(objectClass=person)('.$this->config['ld_attr'].'='.$value_to_search.'))';

                // connection handling
                $this->write_log("[ldap_search_dn]> Connecting to server");

I did not get the check on group working yet and also don't see any properties set when creating new users, will look at that later as well as how I can implement some other changes I need.

As per 22decembre's request, I would be willing to take over this plugin if that's still required. So far I have been a happy user of Piwigo and the LDAP plugin on 2.6 (only recently upgraded to 2.7 due to the lack of its support). I would need someone with AD to test it for me as I am mainly using OpenLDAP.

Let me know if this would be helpful and in case you can test AD integration for me.


Edit: Looked further in the code and noticed that the group check is not compliant with a standard POSIX LDAP structure so won't work like this. There are also some issues with the way the DN is treated by the plugin (assumptions made on BaseDN) that will require some rework.

Edit #2: I made some progress with the group support, which now works with OpenLDAP. Also added it to the main login code as it did not appear to be used yet. Updated version (also including the patch provided above) can be found at: https://gitlab.lindenaar.net/piwigo/Ldap_Login

Last edited by jfl (2015-07-19 23:53:27)

Hi everyone,

It would be great if this plugin was in the official repo! I'm trying to get it to work at the moment and having no luck. I've installed it in the plugins directory and all I get is a white screen when I go to the admin page. Any advice would be appreciated.

Currently running 2.7.4.

Thanks!

@ jfl:

I am running an AD based LDAP (Samba4) and I am very interested in piwigo with full LDAP auth. I could deliver testing and feedback.

Did you take over from 22decembre already?

cheers

I just forked the Ldap_Login plugin and implemented the beforementioned suggestions. I will try to keep it active as long as I use piwigo.

https://github.com/VSLCatena/Ldap_Login

Last edited by Netcie (2017-11-22 11:34:31)