LDAP Support

1, 2, 3
avatar Jan 18. 2007. 6:40 am #11
"madhu":
The user must first have an account within aC with the same username that allows them to authenticate against the AD.


Doesn't this destroy the purpose of an LDAP based login? We have one place where our user data is stored and that is on the Server and we authenticate through LDAP. The whole idea about it is to only have our admin staying sane and having to administer only one set of user data.

Or do I misunderstand the whole idea behind LDAP?

Warmly,
Alex
avatar Ilija Studen Staff Jan 18. 2007. 6:46 am #12
Do you store all your cleint logins on that server? Avatars? activeCollab specific settings?

This morning I've wrote some ideas on new authentication system and basically you'll be able check credentials against any source (LDAP, OpenID etc), but your function will need to return activeCollab User object.

Example: you select that you want to authenticate with username and password against your LDAP authentication system. Your authentication class goes and checks if username and password are OK. Great, they are - query users table to see if we have an activeCollab account that match login data - if there is return it, if not create a new account and return.

Basically, account will need to be present in database, but you'll be able to check credentials any way you like.

Future versions of activeCollab will come with classic authentication system that we have today + OpenID. If someone provides good LDAP authentication adapter it will be included but I don't think that I'll be the person to write it (don't know anything about LDAP to be honest) :)
Follow @activecollab and activeCollab on Facebook.
avatar Jan 21. 2007. 6:21 am #13
Well, at the moment we don't have client logins only users within the company. These exist as server profiles so we can log in on every machine here and get our workspace. We also have a Dokuwiki setup that authenticaes against LDAP (http://wiki.splitbrain.org/wiki%3Aacl). It is set up so we have a default user with user rights and two admins with complete rights. The wiki gets this data from the LDAP server. So technically speaking we don't have any users in the Dokuwiki database at all.

That works fine for the wiki, but I see the restriction in combination with activeCollab Ilija. I like your example though. Check if user exists if not create it. An elegant solution.

I don't know anything about LDAP really. I just enabled it on the Dokuwiki installation and it worked — and quite nice, too. So I thought that is how it is supposed to be. I might be totally wrong though.

Anyway I am looking forward to a possible plugin that allows LDAP support and how it will solve this. Is there any timeframe for the 0.8 release (which did suport the API already, right?) yet?
avatar Ilija Studen Staff Jan 22. 2007. 2:13 am #14
I'll take a look at Dokuwiki.

Thing is that I'll provide a hook in activeCollab to include your own authentication routines and someone will eventually come out with LDAP support. I remember someone offering that contribution, but current authentication system does not allow to be extended (only way to make it work is to hack the source and than you have problems with upgrade and stuff like that).
Follow @activecollab and activeCollab on Facebook.
avatar Jan 22. 2007. 6:56 am #15
Thanks for taking the time to consider my mumbling Ilija. :)

I am very much looking forward to the future of activeCollab. It is an awesome product!
avatar MacDork Sep 19. 2007. 7:37 am #16
I'd also love to see ldap authentication, please.
avatar colin.hostert Pro Dec 19. 2007. 11:34 pm #17
I will be more than happy to provide $20 in free music from grooveshark to anyone who can post working code for AC 1.x that enables LDAP support.

avatar JayC Pro Jun 26. 2009. 9:41 am #18
Here's a followup several years later ;)

I found the documentation for extending authentication ...

http://www.activecollab.com/docs/manuals/developers/authentication/

... but I'm looking for current instructions. Is anyone else doing LDAP authentication and have you posted instructions?
avatar ghm1014 Sep 3. 2009. 6:16 pm #19
My implementation of LDAP Auth.
avatar Ilija Studen Staff Sep 4. 2009. 4:05 am #20
Hi ghm1014,

Thank you for sharing :)
Follow @activecollab and activeCollab on Facebook.
or Go To Next Page