Opauth-Ldap

[Opauth][1] strategy for Ldap authentication., _(*1)

Opauth is a multi-provider authentication framework for PHP., _(*2)

Getting started

Install Opauth-Ldap:, _(*3)

cd path_to_opauth/Strategy
git clone git://github.com/flexcoders/opauth-ldap.git ldap

Configure Opauth-Ldap strategy., _(*4)
Call it., _(*5)

Since this is not an HTTP based protocol, some of the standard Opauth config does not apply. There is no redirection involved, and a username and password needs to be passed., _(*6)

You call it like so:, _(*7)

// some input vars
$providerName = "Ldap";

// prep a config
$config = [
    'provider' => $providerName,
    'username' => $_POST['username'],
    'password' => $_POST['password'],
    'request_uri' => '/current/uri/'.strtolower($providerName),
    'callback_url' => '/your/uri/for/callback/'.strtolower($providerName),
];

// construct the Opauth object
$this->opauth = new \Opauth($config, true);

It will attempt an LDAP login, and then redirect to the callback url, just like with all other Opauth strategies, and with a similar response., _(*8)

Strategy configuration

Required parameters:, _(*9)

<?php
'Ldap' => array(
    'server'        => 'ldap.forumsys.com',
    'port'          => 389,
    'bind-cn'       => 'uid=$username$',
    'bind-dn'       => 'dc=example,dc=com',
    'bind-password' => '$password$',
    'attributes'    => array(
        'uid'      => 'uidnumber',
        'name'     => 'cn',
        'email'    => 'mail',
        'username' => 'uid',
    ),
    'options'       => array(
        LDAP_OPT_PROTOCOL_VERSION => 3,
        LDAP_OPT_REFERRALS => 0,
    ),
    'expiry'        => 86400,
)

Optional parameters: expire, options, _(*10)

The bind() happens on the concatenation of 'bind-cn' and 'bind-dn', and the 'bind-password'., _(*11)

Make sure the attributes array contains the correct attribute mapping. On the left side are the names the Strategy is expecting. If in your schema they are called different, use the name you are using on the righthand side., _(*12)

As in this example, we require an attribute called 'name', which in the schema is called 'cn'. Same for 'email' which is called 'mail' in the schema of the test server., _(*13)

References

If you want to test using an LDAP server on the internet, you can use the config given above. More info about the LDAP schema used and the test server objects, see http://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/, _(*14)