discourse-ldap-auth | Discourse plugin to enable LDAP | Identity Management library
kandi X-RAY | discourse-ldap-auth Summary
kandi X-RAY | discourse-ldap-auth Summary
Discourse plugin to enable LDAP/Active Directory authentication.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of discourse-ldap-auth
discourse-ldap-auth Key Features
discourse-ldap-auth Examples and Code Snippets
Community Discussions
Trending Discussions on discourse-ldap-auth
QUESTION
I currently try to configure Discourse to only allow users in a specific ldap group to log in. Discourse has a plugin called discourse-ldap auth ( https://github.com/jonmbake/discourse-ldap-auth ). This plugin uses the omniauth ldap module: https://github.com/omniauth/omniauth-ldap
My discourse plugin configuration (the configuration is actually used by the discourse plugin for the omniauth ldap module):
- ldap enabled: true
- ldap hostname: the hostname of my ldap server
- ldap port: 389
- ldap method: plain
- ldap base: the base of my ldap server
- ldap uid: userPrincipalName
- ldap bind dn: Nothing
- ldap password: Nothing
- ldap filter: (&(userPrincipalName=%{username})(memberOf=cn=[the name of the required group],ou=....,[base]))
When using this configuration, nobody can log in to the forum. When I use the bind dn and password, everybody can log in. I also tried this filter without success (copied from my ldap servers filter):
- (&(&(&(userPrincipalName=%{username})(memberOf=[dn of the group]))))
What do I have to configure, to only allow users in that specific group to log in?
I didn't found any errors or indicators in the log. Please help!
Thanks fou your help and attention!
...ANSWER
Answered 2018-Nov-21 at 19:09You do need the "ldap dn" and "ldap password". Those are the credentials used to authenticate to LDAP so you can lookup people's accounts. Usually, that is a service account only used by your application.
The filter should probably look something like this:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install discourse-ldap-auth
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page