|
|
| Author |
Message |
Techniplex
Joined: 23 Nov 2005
Posts: 2
|
 Posted: Wed Nov 23, 2005 4:02 pm Post subject: Novell NDS LDAP Authentication for CACTI |
 |
|
I have re-written the AUTH_LOGIN.PHP to utilize Novell's eDirectory LDAP. It may still work with active directory but I have not tried it. It works with 0.8.6c and higher. Please test and enjoy.
| Description: |
| Novell eDirectory LDAP Module |
|
Download |
| Filename: |
auth_login.zip |
| Filesize: |
2.56 KB |
| Downloaded: |
240 Time(s) |
|
|
| Back to top |
|
 |
rony
Developer/Forum Admin
Joined: 17 Nov 2003
Posts: 5469
Location: Wisconsin, USA
|
| Posted: Wed Nov 23, 2005 5:08 pm Post subject: |
|
|
FYI....
If you would use the properly formatted "LDAP DN" in "Settings -> Authenication -> LDAP Settings" your would not have to modify the code.
I did look at your patch and the properly formatted DN for your environment is:
The above will work for you, because all that cacti is worried about is that you can bind to the LDAP directory with that DN and password combination.
The code you have added is kinda redundent, in that you are binding with the username and password then searching for the DN.
If you would like to see a great example of LDAP code for better authenication, check out the SVN code in the TRUNK section. This is the 0.9.0 developement branch where I have added a lot of features, including the one you have implemented here.
Any questions, ask away, I even invite you to email me.
|
|
| Back to top |
|
|
Techniplex
Joined: 23 Nov 2005
Posts: 2
|
| Posted: Wed Nov 23, 2005 5:33 pm Post subject: NDS Auth |
|
|
| The problem I was getting around was that we do not allow guests/anonymous to browse/bind to the LDAP tree. I also thought that this implementation wanted user@context (AD implementation) instead of o=xxxxx,cn=yyyy I performed a bind using the user/pass which proved that the the user/pass combination was valid.
|
|
| Back to top |
|
|
rony
Developer/Forum Admin
Joined: 17 Nov 2003
Posts: 5469
Location: Wisconsin, USA
|
| Posted: Wed Nov 23, 2005 6:03 pm Post subject: |
|
|
Yah,
Well, that's where the LDAP DN comes in. You can setup a DN in cacti, like:
| Code: | | o=xxxx,cn=<username> |
and "<username>" will be replaced with the username that was used at the login page.
Then if it can bind, it it considered good.
I know and understand why you did this. But it's kinda redundant, in that you are already binding with that user to search for the DN. Cacti doesn't care other that it can bind, it doesn't use anymore information from the LDAP.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Register
Profile
Log in to check your private messages
Log in
