PHPLDAPAdmin

[yit]

I’m trying to get PHPLDAPAdmin to work, but I’m only getting it to work in read-only mode. I have set up a osx-panther G4 and a osx 10.3-server G4.
I can view the ldap-dir, when I connect with anomous bind.
In the config.php (the configfile of PHPLDAPAdmin) I have set auth_type to ‘session’ and default_hash to ‘blowfish’.

How can I properly connect to the the LDAP-dir, so that I can write some entries to it ?

I called my server “server.example.nl”.

[Anonymous]

this is working for me
$blowfish_secret = ”;

// Your LDAP servers
$i=0;
$servers = array();
$servers[$i][‘name’] = ‘server.example.nl’; /* A convenient name that will appear in
the tree viewer and throughout phpLDAPadmin to
identify this LDAP server to users. */
$servers[$i][‘host’] = ‘server.example.nl’; /* Examples:
‘ldap.example.com’,
‘ldaps://ldap.example.com/’,
‘ldapi://%2fusr%local%2fvar%2frun%2fldapi’
(Unix socket at /usr/local/var/run/ldap)
Note: Leave ‘host’ blank to make phpLDAPadmin
ignore this server. */
$servers[$i][‘base’] = ”; /* The base DN of your LDAP server. Leave this
blank to have phpLDAPadmin auto-detect it for you. */
$servers[$i][‘port’] = 389; /* The port your LDAP server listens on
(no quotes). 389 is standard. */
$servers[$i][‘auth_type’] = ‘session’; /* Three options for auth_type:
1. ‘cookie’: you will login via a web form,
and a client-side cookie will store your
login dn and password.
2. ‘session’: same as cookie but your login dn
and password are stored on the web server in
a persistent session variable.
3. ‘config’: specify your login dn and password
here in this config file. No login will be
required to use phpLDAPadmin for this server.
Choose wisely to protect your authentication
information appropriately for your situation. If
you choose ‘cookie’, your cookie contents will be
encrypted using blowfish and the secret your specify
above as $blowfish_secret. */
$servers[$i][‘login_dn’] = ”;
/* The DN of the user for phpLDAPadmin to bind with.
For anonymous binds or ‘cookie’ or ‘session’ auth_types,
leave the login_dn and login_pass blank. If you specify a
login_attr in conjunction with a cookie or session auth_type,
then you can also specify the login_dn/login_pass here for
searching the directory for users (ie, if your LDAP server
does not allow anonymous binds. */
$servers[$i][‘login_pass’] = ”; /* Your LDAP password. If you specified an empty login_dn above, this
MUST also be blank. */
$servers[$i][‘tls’] = false; /* Use TLS (Transport Layer Security) to connect to the LDAP
server. */
$servers[$i][‘low_bandwidth’] = false; /* If the link between your web server and this LDAP server is
slow, it is recommended that you set ‘low_bandwidth’ to true.
This will cause phpLDAPadmin to forego some "fancy" features
to conserve bandwidth. */
$servers[$i][‘default_hash’] = ”; /* Default password hashing algorithm.
One of md5, ssha, sha, md5crpyt, smd5, blowfish, crypt or
leave blank for now default algorithm. */
$servers[$i][‘login_attr’] = ‘string’; /* If you specified ‘cookie’ or ‘session’ as the auth_type above,
you can optionally specify here an attribute
to use when logging in. If you enter ‘uid’
and login as ‘dsmith’, phpLDAPadmin will
search for (uid=dsmith) and log in as that user. Leave
blank or specify ‘dn’ to use full DN for
logging in. Note also that if your LDAP server requires
you to login to perform searches, you can enter
the DN to use when searching in ‘login_dn’ and
‘login_pass’ above. You may also specify ‘string’, in which case
you can provide a string to use for logging users
in. See ‘login_string’ directly below. */
$servers[$i][‘login_string’] = ‘uid=diradmin,cn=users,dc=server,dc=example,dc=nl’;
/* If you specified ‘cookie’ or ‘session’ as the auth_type above,
and you specified ‘string’ for ‘login_attr’ above, you must provide
a string here for logging users in. If, for example, I
I have a lot of user entries with DNs like
"uid=dsmith,ou=People,dc=example,dc=com", then I can specify a string
"uid=<username>,ou=People,dc=example,dc=com" and my users can login with
their user names alone, i.e., "dsmith" in this case. */
$servers[$i][‘login_class’] = ”; /* If ‘login_attr’ is used above such that phpLDAPadmin will
search for your DN at login, you may restrict the search to
a specific objectClass. E.g., set this to ‘posixAccount’ or
‘inetOrgPerson’, depending upon your setup. */
$servers[$i][‘read_only’] = false; /* Specify true If you want phpLDAPadmin to not
display or permit any modification to the
LDAP server. */
$servers[$i][‘show_create’] = true; /* Specify false if you do not want phpLDAPadmin to
draw the ‘Create new’ links in the tree viewer. */
$servers[$i][‘enable_auto_uid_numbers’] = false;
/* This feature allows phpLDAPadmin to
automatically determine the next
available uidNumber for a new entry. */
$servers[$i][‘auto_uid_number_mechanism’] = ‘search’;
/* The mechanism to use when finding the next available uidNumber.
Two possible values: ‘uidpool’ or ‘search’. The ‘uidpool’
mechanism uses an existing uidPool entry in your LDAP server
to blindly lookup the next available uidNumber. The ‘search’
mechanism searches for entries with a uidNumber value and finds
the first available uidNumber (slower). */
$servers[$i][‘auto_uid_number_search_base’] = ‘cn=users,dc=server,dc=example,dc=com’;
/* The DN of the search base when the ‘search’
mechanism is used above. */
$servers[$i][‘auto_uid_number_min’] = 1000;
/* The minimum number to use when searching for the next
available UID number (only when ‘search’ is used for
auto_uid_number_mechanism’ */
$servers[$i][‘auto_uid_number_uid_pool_dn’] = ‘cn=uid,dc=server,dc=example,dc=com’;
/* The DN of the uidPool entry when ‘uidpool’
mechanism is used above. */
$servers[$i][‘auto_uid_number_search_dn’] = ”;
/* If you set this, then phpldapadmin will bind to LDAP with this user
ID when searching for the uidnumber. The idea is, this user id would
have full (readonly) access to uidnumber in your ldap directory (the
logged in user may not), so that you can be guaranteed to get a unique
uidnumber for your directory. */
$servers[$i][‘auto_uid_number_search_dn_pass’] = ”;
/* The password for the dn above. */
$servers[$i][‘disable_anon_bind’] = false;
/* Disable the anonymous login. */
$servers[$i][‘custom_pages_prefix’] = ‘custom_’;
/* Use customized page with prefix when available. */

$servers[$i][‘unique_attrs_dn’] = ”;
/* If you set this, then phpldapadmin will bind to LDAP with this user
when testing for unique attributes (as set in unique_attrs array). If you
want to enforce unique attributes, than this id should have full (readonly)
access to the attributes in question (the logged in user may not have
enough access) */
$servers[$i][‘unique_attrs_dn_pass’] = ”;
/* The password for the dn above */

[Author]

Posts