2

I'm hoping someone here can help me out. Joomla's LDAP plugin is driving me crazy. I'm trying to get Joomla to authenticate against my AD server but have been having no luck. I've been searching all around the web and can't really find any info. I have enabled the plugin, installed php7.0-ldap on my ubuntu server, and it's still failing to bind to LDAP. Here is my config:

  1. Host: AD IP
  2. Port: 389
  3. LDAP V3: No
  4. Negotiate TLS: No
  5. Follow Referrals: No
  6. Authorization Method: Bind and Search
  7. Base DN: DC=domainname,DC=local
  8. Search String: uid=[search],OU=SBSUsers,OU=Users,OU=Hospice User's
  9. DN: uid=[username]
  10. Connect Username: domain\user
  11. Connect Password: Password
  12. Map Full Name: fullName
  13. Map Email: mail
  14. Map User ID: sAMAccountName

I'm just not sure what else I could do. Any suggestions? Please and Thank you!

Improve this question
2
  • 1
    What you need is to see what error you're hitting. 1. have you successfully bound with straight php ldap connect and bind? 2. Is your LDAP server really LDAP2? Isn't that from a million years ago? 3. I suggest you don't use the minimal Joomla LDAP plugin - use JMapMyLdap instead [shmanic.com/tools/jmapmyldap] even though it requires more setup it comes with a bunch of cool features like debugging binds, mapping ad security groups to joomla usergroups etc.
    – jamesgarrett
    Mar 28 '17 at 7:57
  • Hey there! Thank you for responding and I was finally able to figure it out. Turns out my configuration was slightly off. The following config is what fixed it: LDAP V3: Yes, Search String: sAMAccountName=[search], Connect Username: user@domain.local I did come across JMapMyLdap but I saw that it's last update was from 2015. I'm a bit worried using extensions which don't provide frequent updates. But from what I could tell, that extension would work wonders as it allows for LDAP grouping which is what I need as well.
    – Mark Anthony
    Mar 28 '17 at 12:09
1

For others who may be looking for the answer to this question, you can use these configurations as a guide:

  • LDAP V3: Yes
  • Search String: sAMAccountName=[search]
  • Connect Username: user@domain.local
Improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.