RLRPC wrote:
Fantastic. I wish someone like you existed in the phpBB/VBulletin arenas... they're all UNIX-heads and for years their developers have said "an LDAP mod for Active Directory would be easy" but yet it is still not stable out of the box even on phpBB 3.0 RC7. WWF is the ONLY forum software I have yet to test that supports AD out of the box.
|
I've never been too successful with php (it's too much live javascript!

). This solution is weighted towards a Microsoft environment (utilising functions like "name translate"), however the big issue i see is obtaining the user details automatically (for example a *unix box may not know you are valid person in a windows environment). You could modify a login screen to authenticate againist an LDAP server, but I think the attribute SAMaccountName (your windows username) may be Microsoft specific.
In essence, I would get a username and password, then try to bind to an object in the LDAP using these details (assume they had the correct rights), if successful the user is valid, if not, they are not.
Once you've got a valid account, find it in LDAP, bind to it for the other attributes, like office, email, telephone, etc.