tiki.org forumLDAP / Active directoryLatest posts to this formThis is the forum for questions and support requests concerning LDAP &amp; Active Directory in Tiki.https://tiki.org/img/tiki/Tiki_WCG_Community.png2026-11-10T03:19:01+00:00Laminas_Feed_Writerhttps://tiki.org/<![CDATA[Tiki connection to a AD server in a external private network.]]>2024-05-07T08:46:00+00:002024-05-07T08:46:00+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=79521<![CDATA[PAM authentication -- first login attempt fails, but second works]]>2022-04-14T13:11:19+00:002022-04-14T13:11:19+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=78259<![CDATA[Import AD-Users in tracker "user picker" field]]>2021-08-11T14:33:02+00:002021-08-11T14:33:02+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=77392<![CDATA[AD-login OK, but no admin and editing possible any more]]>2021-03-17T14:19:56+00:002021-03-17T14:19:56+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=76530<![CDATA[Tiki-Wiki SSO]]>2020-12-09T09:06:55+00:002020-12-09T09:06:55+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=75602<![CDATA[geht es auch ohne LDAP - Alfahosting]]>2020-11-17T13:26:24+00:002020-11-17T13:26:24+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=75432<![CDATA[ApacheDS2.0 / Tikiwiki 21 - LDAP Sync Group ]]>2020-04-23T22:04:58+00:002020-04-23T22:04:58+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=73604<![CDATA[Use tiki to authorise other sources]]>2019-03-25T20:48:53+00:002019-03-25T20:48:53+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=71588<![CDATA[Authentication against Samba 4 active directory (Univention)]]>2018-11-12T17:30:46+00:002018-11-12T17:30:46+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=70680<![CDATA[External groups by LDAP distinguishedName in Tiki 19?]]> Log in > LDAP external groups) is set to 'distinguishedName'
* Extract all the OU (Organizational Units) of the distinguishedName
* Make the user member (or create if doesn't exist) of these user groups with the names of the OU's.
So if a user logs in with a distinguishedName:
''CN=User Name,OU=Group,OU=Department,OU=Location,DC=Company,DC=local''
He will be made part of the groups: ''Group, Department and Location''
Xorti (or another developer), I can imagine this is useful for more organisations and could be made part of this updated code for Tiki 19?
Tiki 18.1 lib\auth\LDAP.php added on row 376 (code can use a bit of cleanup):
{CODE()} if ($this->options['usergroupattr'] === 'distinguishedName') {
// get membership from user DN
$this->add_log('ldap', 'LDAP CUSTOMIZED: usergroupattr is indeed distinguishedName');
// split DN into RDN strings
$dn_string = $this->user_attributes[$this->options['usergroupattr']];
$rdn_strings = explode(',', $dn_string);
// add value of RDNs with OU type
$ugi = [];
foreach ($rdn_strings as $rdn_string) {
// split RDN string in type and value
$rdn_parts = explode('=', $rdn_string, 2);
$rdn_type = $rdn_parts[0];
$rdn_value = $rdn_parts[1];
// add RDN value if type is OU
if ($rdn_type === 'OU') {
$ugi[] = $rdn_value;
$this->add_log('ldap', 'LDAP CUSTOMIZED: added ' . $rdn_value . ' to ugi');
}
}
} else {
$ugi = &$this->user_attributes[$this->options['usergroupattr']];
}{CODE}]]>2018-07-20T13:48:04+00:002018-07-20T13:48:04+00:00https://tiki.org/tiki-view_forum_thread.php?comments_parentId=69666