Help with an LDAP plugin?

grhodes

Hi folks,

I'm trying my luck at writing an LDAP authentication plugin and could really use some help, my PHP is quite basic as I'm used to Java.

https://github.com/grahamar/vanillaLDAPAuthenticator

The basic approach I've taken is overriding the UserModel->validateCredentials to authenticate using LDAP instead of querying the database. So far I'm not having any luck, any help would be much appreciated.

Thanks,
Graham

x00

Method Overrides are not recommend, in fact few if any plugins do this.

I would use ProxyConnect. you might want to contact @CurtisOden he has done some LDAP integration apparently.

grhodes

I had a feeling it wouldn't be recommended...

From what I can tell ProxyConnect looks deprecated in favour of jsConnect, but either way it's not ideal for my organisations needs, all our internal applications use LDAP straight out of the box and the less "wiring" the better!

I might contact CurtisOden if I really hit a dead end but for now I'm going to try pull out the functionality from ProxyConnect https://github.com/real-chocopanda/Proxyconnect? As the overriding way didn't work... Could just be my lack of PHP knowledge.

My first issue is though, how to get an authenticator plugin to register (i.e. show up in the authentication settings dropdown box), class.auth.php->RegisterAuthenticator specifically only deals with core authenticators... So as far as I can see pluggable authenticators can't be implemented this way...

Best thing I can think of is to request a pull to the Garden core of a new LDAP authenticator... Would that be the best option...?

x00

I think people make to much of ProxyConnect being depreciated. It is actually a methodology, more than anything. There is connect infrastructure in the core.

hgtonight

Just found this link in an old issue on GitHub.

http://www.zeitoun.net/articles/cas-jasig-integration-with-sso-proxyconnect-vanilla2-plugin/start

Might be helpful.