51 lines
2.6 KiB
Plaintext
51 lines
2.6 KiB
Plaintext
The LDAP plugin allows for StatusNet to handle authentication, authorization, and user information through LDAP.
|
|
|
|
Installation
|
|
============
|
|
add "addPlugin('ldap', array('setting'=>'value', 'setting2'=>'value2', ...);" to the bottom of your config.php
|
|
|
|
Settings
|
|
========
|
|
authn_authoritative (false): Set to true if LDAP's responses are authoritative (meaning if LDAP fails, do check the any other plugins or the internal password database).
|
|
autoregistration (false): Set to true if users should be automatically created when they attempt to login.
|
|
email_changeable (true): Are users allowed to change their email address? (true or false)
|
|
password_changeable (true): Are users allowed to change their passwords? (true or false)
|
|
|
|
host*: LDAP server name to connect to. You can provide several hosts in an array in which case the hosts are tried from left to right.. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
port: Port on the server. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
version: LDAP version. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
starttls: TLS is started after connecting. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
binddn: The distinguished name to bind as (username). See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
bindpw: Password for the binddn. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
basedn*: LDAP base name (root directory). See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
options: See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
filter: Default search filter. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
scope: Default search scope. See http://pear.php.net/manual/en/package.networking.net-ldap2.connecting.php
|
|
|
|
attributes: an array with the key being the StatusNet user attribute name, and the value the LDAP attribute name
|
|
nickname*
|
|
email
|
|
fullname
|
|
homepage
|
|
location
|
|
|
|
* required
|
|
default values are in (parenthesis)
|
|
|
|
Example
|
|
=======
|
|
Here's an example of an LDAP plugin configuration that connects to Microsoft Active Directory.
|
|
|
|
addPlugin('ldap', array(
|
|
'authn_authoritative'=>true,
|
|
'autoregistration'=>true,
|
|
'binddn'=>'username',
|
|
'bindpw'=>'password',
|
|
'basedn'=>'OU=Users,OU=StatusNet,OU=US,DC=americas,DC=global,DC=loc',
|
|
'host'=>array('server1', 'server2'),
|
|
'attributes'=>array(
|
|
'nickname'=>'sAMAccountName',
|
|
'email'=>'mail',
|
|
'fullname'=>'displayName')
|
|
));
|