http://www.activecollab.com/forums/topic/2311/ Recent posts on topic: Active Directory authentication provider en-us Fri, 05 Sep 2008 12:55:18 UTC http://www.activecollab.com/forums/post/14258/#post14258 http://www.activecollab.com/forums/post/14258/#post14258 jackmortondigital Hi,

I seem to be having the same issues as Steve. At least I'm at the same point - main auth working, the authenticate.php script that comes with adLDAP is working fine, but I just get a bad login error when trying to login to activeCollab. I've tried a bunch of different things in the email address field, including all the possibilities that our AD could be using, but with no luck.

Any suggestions for how to proceed would be much appreciated. I'll respond here if I make any progress.

Thanks.

- Evan

]]> Mon, 04 Aug 2008 16:16:28 UTC http://www.activecollab.com/forums/post/14198/#post14198 http://www.activecollab.com/forums/post/14198/#post14198 Steve Mitchell Hello,
I've installed this module, but users cannot login even though LDAP authentication is successful.

Here's what I've done to troubleshoot:

I'm capturing packets (via tcpdump) on the host with ActiveCollab installed, and I can see the request go out to our Active Directory server to bind using the service account, which is successful. I then see a bind request for the user attempting to login, and that is also successful.

However, from the users perspective, he/she can never login and is given a "Failed to log you in with data your provided. Please check your data and try again" error.

I know all of the settings in my config are correct since the LDAP auth is working perfectly, and I can see that in tcpdumps. I think there may be another issue here - either it's not passing the right group or role identifier, so things bail, or something else.

There's a cryptic reference to email addresses and login names needing to be the same. What does this mean? My active directory setup definitely does not work this way... we have the following:

usernames in Active Directory are like: steve@internal.companyinternal.com
email addresses are like: steve@company.com

The domains are completely different. Will this matter?

]]> Thu, 31 Jul 2008 16:32:54 UTC http://www.activecollab.com/forums/post/14114/#post14114 http://www.activecollab.com/forums/post/14114/#post14114 IDEO Hi, I am using activeCollab v1.1.2. I tried installing the module per the instructions and it is not working. AC is acting like it is not trying to authenticate the users at all with the module. If I change the AUTH_AD_BIND username or password to something I know is incorrect I do not get any errors, so I don't think the module is being called.

I did not have the define('AUTH_PROVIDER', 'BasicAuthenticationProvider'); line in the config/config.php as the instructions stated so I just added the define('AUTH_PROVIDER', 'ActiveDirectoryAuthenticationProvider'); line and the other define lines with the correct info for my AD system.

Is there a setting in AC to tell it to use the authentication? Or am I missing something else simple?

Thanks for any help

]]> Mon, 28 Jul 2008 22:58:39 UTC http://www.activecollab.com/forums/post/14002/#post14002 http://www.activecollab.com/forums/post/14002/#post14002 Ilija Studen Users can log in with their AD credential and system will automatically create user accounts for them and log them in. This can be beneficial if you already have a lot of users in AD and don't want to import them manually. If custom authentication fails system falls back to default, build in behavior.

]]> Wed, 23 Jul 2008 17:16:28 UTC http://www.activecollab.com/forums/post/13995/#post13995 http://www.activecollab.com/forums/post/13995/#post13995 gmoyle So if I still have to login each time with my email address and password (as before) what benefit is it then. I guess I misunderstood what benefit I would gain by using it.

]]> Wed, 23 Jul 2008 15:29:52 UTC http://www.activecollab.com/forums/post/13962/#post13962 http://www.activecollab.com/forums/post/13962/#post13962 Ilija Studen Appearance is not changed in any way - only think that changes is how activeCollab handles authentication internally.

]]> Wed, 23 Jul 2008 04:47:38 UTC http://www.activecollab.com/forums/post/13958/#post13958 http://www.activecollab.com/forums/post/13958/#post13958 gmoyle Being new to LDAP authentication, I am left wondering how this is supposed to work.

If I already have an account, am authenticated on the network, should I just be logged in automatically?
Does the login screen change when this is enabled (it appears to still ask for email/password, when we use username password)

I have it installed, and if I put a wrong password in the config file, it errors, so I know that it is binding to the LDAP server, but functionality seems to not have changed at all?

]]> Tue, 22 Jul 2008 23:25:51 UTC http://www.activecollab.com/forums/post/13721/#post13721 http://www.activecollab.com/forums/post/13721/#post13721 Ilija Studen Hi Casper,

Package is approved and available here (in Downloads section). Thank you for this nice contribution!

]]> Tue, 08 Jul 2008 11:25:32 UTC http://www.activecollab.com/forums/post/13720/#post13720 http://www.activecollab.com/forums/post/13720/#post13720 Valdemar Updated the AD auth provider. Now for aC 1.1+ only.

* Fixed: Correctly adds new users
* Added: First and last name to new user accounts from AD

(sorry for not being more active here, also in regards to the charts module, but I'm really busy).

]]> Tue, 08 Jul 2008 09:56:27 UTC http://www.activecollab.com/forums/post/13479/#post13479 http://www.activecollab.com/forums/post/13479/#post13479 Ilija Studen Thing with protected fields is that they cannot be set using setAttributes() method. Instead, you need to call setCompanyId() method directly from your code.

This restriction was introduced so people cannot change their companies through API. That operation is not supported.

]]> Mon, 16 Jun 2008 10:40:23 UTC