LDAP -> Better configuration options

[tejohnson]

As posted in: http://forums.kayako.com/showthread....ldap#post57524

The following was me adding my 2¢ regarding the support and configuration of the Active Directory plugin:

I do find this a bit curious. Not to be critical of the developers, or the support personnel, but the configuration of the plugin *is* a bit misleading. The term RDN is for "Relative Distinguished Name". I believe the configuration requires the FQDN of an account that has "read" access to the part of the Directory Information Tree (DIT) you specified in the "Base DN" value. (i.e.,

Active Directory Host: ad.corp.com
Port (Default: 389): 389
Base DN: dc=corp,dc=com
RDN [sic]: cn=Administrator,ou=Users,dc=corp,dc=com
Password: ******** [This _Should_ be masked, please fix]

)

Given the example above the host and port are obvious. For the Base DN, if you make this the actual base suffix of your directory, the entire directory will be searched. If you want to only search "ou=Users,dc=corp,dc=com" consider setting the "Base DN" to "ou=Users,dc=corp,dc=com". As for the field "RDN", it should be termed "FQDN". If the above were to actually be the "RDN", then the value would be "cn=Administrator".

The password is also obvious, but for some reason in the form, the password is not a password input type (i.e., not masked). This should be fixed ASAP.

The DN and Password that is configured in this plugin is to simply search the directory for the email supplied to the user. Once it finds the user's directory entry, it takes the FQDN of the user and the password supplied by the end user and attempts a "bind" to the directory (i.e., the plugin tries to log in as that user). If the bind succeeds, then they (the user) are authenticated.

It would take little work to re-write this plugin to add support for OpenLDAP, Sun Java Directory Server, and *other* directory servers as well. But, I agree, the documentation for this is.... sparse.

I intended to re-write the plugin for my own needs (OpenLDAP). Perhaps the above is merely a suggestion.

[craigbrass]

Thanks for posting it here. Hopefully it will be considered for V4.

[jgodfrey]

It would be nice to see support for Novell and their eDirectory as a feature as well. Currently, the Microsoft LDAP option does not fill the needs of users on Novell.

Thanks for your help with this and I look forward to this portion of the product being updated.

[jgodfrey]

Is there an update or ETA of adding further LDAP and login support for Novell?

[craigbrass]

It is marked as "Will Implement in V4".

[Jamie Edwards]

Originally Posted by jgodfrey

Is there an update or ETA of adding further LDAP and login support for Novell?

The Version 4 ETA has not been announced yet and will not be for a while. We do intend to implement this feature in Version 4, the next of our product lines.

[ppafford]

Will this include openLDAP?