Joomla! Authentication Tools



Check out the Quickstart for 1.5 users: http://sammoffatt.com.au/jauthtools/Quickstart_for_1.5
i have much experience with joomla, creating many installations and now developing a componenet. which i need to use in conjuction with my AD user groups.
I have contacted the owner numerous times, without success.
Looking at the code this plugin has exceptional intellegence, unfortunatley i am unable to debug what the problem is. There is just no feedback.
There is alot of valuable information on the owners website, if it works first time for you thats good, otherwise,... create your own?
I used this script for authentication and created my own script for access permissions based on Active Directory groups.
If you check out the LDAP User Source you will find the following options:
- Map User Groups (this should be memberOf for AD)
- Map Group Members (this should be member for AD)
- Use Reverse Group Membership - this when enabled will look at the groups in the group map to find the members of the group; I don't think this is presently compatible with recursive group membership
- Authenticate Group Search - This is required to be enabled for AD
- Use Recursive Group Membership - This works back through the tree to find the group memberships for the user which can then be applied to the group map
I think you've replicated the functionality of the last option but I'm not entirely sure.
I have the two joomlas: joomla 1.0 and joomla 1.5. joomla 1.5 is installed in subdirectory of joomla 1.0. f.e. www.joomla10.com/joomla15. I did sync registration so when user registered in 1.0 he also registered in 1.5. Now I need to make user who is logged in in jooma 1.0 also logged in in joomla 1.5 when he go to /joomla15 subdirectory. How can I solve this problem
Thank you
The SOAP SSO tool might be able to provide you with what you need. It offers the ability to handle SSO requests between Joomla! sites. If possible please user the mailing list (see http://joomlacode.org/gf/project/jauthtools/mailman) for support requests.
When configuring the string as: cn=[username],ou=staff,o=org;cn=[username],ou=students,o=org the search is shown as cn=name,ou=staff,o=org,ou=students,o=org which then has to fail. I have written several LDAP authentication mechanisms in PHP for AD and eDirectory. I am currently looking at Sam's code and see where it can be adjusted to provide that authentication where users are members of different OUs.
It's also very picky about it's queries - you need to be a perfect match (no extra spaces, etc). I actually used Ethereal (a packet sniffer) to monitor the LDAP activity to figure out all the details of how it worked. Between Ethereal and looking at the code itself, it started to make sense.
I'm hosting on IIS, with integrated authentication on the whole site. I'm using Samuel's ldap bot, ldap sync bot, and the HTTP Single Signon. My users love it because they don't even see a login box - and yet it populates all the usual user fields and keeps them in sync with AD.
I'm using Community Builder and find that I still have to "approve" the user even the the auto-approve setting is enabled (at least so they can see their profile) but normal "registered" user functionality is there immediately.
If you have patience - it's a great tool.





