Forum posts to 'Extending and hacking'

Re: External Authenticator

Matt Hardwick — Sun, 24 Aug 2008 02:50:23 +1200

Hi Lancer,

You hint in one of the docs that it would be possible to remove the original simple machines auth tab - how can I do that?

TIA

Posted to: External Authenticator

Importing members?

Alex Smith — Wed, 28 May 2008 16:50:32 +1200

I can now happily authenticate against my Active Directory using the External Authenticator module but it still requires manually setting up all my 50 members in the Security tab of Silverstripe... For example, it would be really good to be able to import the required details from my Active Directory directly, or at least via a text file.

[b]Would it be possible to have a "Import Members" button next to the "Add Member" button?[/b]

Posted to: External Authenticator

Re: External Authenticator

Alex Smith — Wed, 28 May 2008 16:33:39 +1200

After following [url]http://doc.silverstripe.com/doku.php?id=installation-on-windows[/url]
and then selecting php_ldap from PHP->PHP Extensions, I installed a clean copy of the auth_external module, setup _config.php, removed "array" from the "authenticate" function in ExternalAuthenticator.php and set the "ID to be used with this source" for the Member.

[b]Now it works! Thanks lancer for all your help and thanks other people who chipped in too :D [/b]

Posted to: External Authenticator

Re: External Authenticator

Alex Smith — Mon, 26 May 2008 18:55:35 +1200

Sorry, I'm now downloading 2.2.2 :)

Posted to: External Authenticator

Re: External Authenticator

Roel Gloudemans — Mon, 26 May 2008 18:21:06 +1200

The change is 2.2.2 only. With 2.2.1 and before it shouldn't be changed. I got the error message you described after upgrading to 2.2.2.

Posted to: External Authenticator

Re: External Authenticator

Alex Smith — Mon, 26 May 2008 11:34:04 +1200

Sorry, I'm confused, I changed:
[code]
public static function authenticate(array $RAW_data, Form $form = null)
[/code]
into
[code]
public static function authenticate($RAW_data, Form $form = null)
[/code]
but now I get:

[i]Fatal error: Declaration of ExternalAuthenticator::authenticate() must be compatible with that of Authenticator::authenticate() in C:\lighttpd\htdocs\auth_external\code\ExternalAuthenticator.php on line 458[/i]

when I do a:
http://localhost:3000/db/build?flush=1

Posted to: External Authenticator

Re: External Authenticator

Roel Gloudemans — Mon, 26 May 2008 06:43:11 +1200

It seems External Authenticator is broken for SilverStripe 2.2.2
http://open.silverstripe.com/ticket/2536

(I know, I should have tested with the RC's)

This fix is very simple however. See the bug report.

(PS. xzelan, correct, but I guess you found out already in the mean time)

Posted to: External Authenticator

Re: External Authenticator

Alex Smith — Mon, 19 May 2008 12:13:44 +1200

Thanks Matthias! That may have fixed it for me also. Now I get the message below, which I think is just some code we were using for testing. Is that correct Lancer?

hello(sAMAccountName=silverstripe)Array ( [count] => 1 [0] => Array ( [samaccountname] => Array ( [count] => 1 [0] => silverstripe ) [0] => samaccountname [count] => 1 [dn] => CN=silverstripe,CN=Users,DC=totaleyecare,DC=com,DC=au ) )

Posted to: External Authenticator

Re: External Authenticator

Matthias Junge — Sat, 17 May 2008 01:41:20 +1200

Hi @all

I had the same problem as xzelan and was stuck at the error message "Could not bind to LDAP server." (Windows Small Business Server 2003 with SP2)

But after I have changed the user name in the second last line of the _config.php from the DN to the UPN (User Principal Name), it worked immediately.

[code]ExternalAuthenticator::setOption('testldap', 'bind_as',[color=red]'testuser@your.domain'[/color]); [/code]

Hope that helps.
Matthias

Posted to: External Authenticator

Re: External Authenticator

Alex Smith — Wed, 07 May 2008 15:31:45 +1200

I've attached a screenshot of JXplorer happily browsing the AD using the "silverstripe" username as you suggested, rather than "Administrator". However, I still get "Could not bind to LDAP server."

I've also attached a screenshot of the security tab of the cms.

Posted to: External Authenticator