|
Active Directory 2003 Authentication |
|
 Authenticate users against Active Directory (Windows 2003 Server). Instructions for installing this module are contained in the README.txt file within the zip file.
This module requires that PHP has LDAP support enabled. After the module is installed, it will tell you if your PHP installation does not have LDAP support.
Download ||
Author: eXtrovert Software
Settings explained
- # Active Directory Host (PDC)
$ad_opts['host'] = 'domaincontroller';
This should be set to the hostname (or IP address) of your Windows 2003 Active Directory server.
- # Active Directory username and password.
$ad_opts['anon_dn'] = 'thyme';
$ad_opts['anon_pw'] = 's3@rch';
This should be set to an existing username and password in your AD implementation that has access to connect and list users. By default, all authenticated users may do this so any existing user will do. You may wish to create a user in Active Directory specifically for Thyme.
If your Active Directory implementation allows for anonymous searches, you may set these to empty values. Default AD installations in Windows 2003 do not allow for this.
- # Active Directory domain
$ad_opts['domain'] = 'docs.esoft.local';
Your Active Directory domain.
- # Default admin/superuser userid
$ad_opts['admin'] = "dblack";
An existing user in Active Directory that will be designated as a Super User in Thyme. When this user logs in, they may designate other users as Super Users.
- # Active directory container to search.
# Most people will not need to change this
$ad_opts['search_suffix'] = "CN=Users,";
This designates Users as the container name to search. This may be changed if you wish to restrict Thyme to an organizational unit or other container.
For instance if you have created an Organizational Unit named Staff and you wish to restrict Thyme to this, the 'search_suffix' setting should be set to 'OU=Staff,'
For more information on Active Directory please refer to the documentation provided by Microsoft.
Enabling LDAP support in PHP
This assumes you are running PHP in a Windows environment. To enable LDAP support in PHP, locate php.ini on your web server and open it using a text editor. In most cases double-clicking on it will open it in Notepad, which will do just fine. Locate the line containing:
;extension=php_ldap.dll
Remove the semicolon at the beginning so that it looks like this:
extension=php_ldap.dll
Save and close the file. Then restart IIS (or Apache). LDAP support should now be enabled in PHP.
NOTE: If you find more than one php.ini, please make this change to each one before restarting the web server.
|
