The Joomla! Extensions Directory ™


Joomla! Authentication Tools ComponentPluginExtension Specific Addon

A variety of useful items (mambots/plugins and components) primarily for LDAP, tested in a Novell eDirectory environment. It contains: LDAP User Synchronization, LDAP User Authentication, LDAP Single Sign On. These tools are available for both Joomla! 1.0 and Joomla! 1.5

Check out the Quickstart for 1.5 users: http://sammoffatt.com.au/jauthtools/Quickstart_for_1.5

Report

2011-02-07
Reviews: 2
Setting up this plugin proves very difficult for me,
i have much experience with joomla, creating many installations and now developing a componenet. which i need to use in conjuction with my AD user groups.

I have contacted the owner numerous times, without success.

Looking at the code this plugin has exceptional intellegence, unfortunatley i am unable to debug what the problem is. There is just no feedback.

There is alot of valuable information on the owners website, if it works first time for you thats good, otherwise,... create your own?
2009-08-05
Reviews: 1
Worked well for authentication but not well using Active Directory and group memberships. I believe the script only searches the memberOf attribute for a particular account. To get all the groups associated with a user in Active Directory you need to search the users memberOf attribute, find their primary group id, and search recursively for member attribute in every group.

I used this script for authentication and created my own script for access permissions based on Active Directory groups.
Owner's reply

If you check out the LDAP User Source you will find the following options:
- Map User Groups (this should be memberOf for AD)
- Map Group Members (this should be member for AD)
- Use Reverse Group Membership - this when enabled will look at the groups in the group map to find the members of the group; I don't think this is presently compatible with recursive group membership
- Authenticate Group Search - This is required to be enabled for AD
- Use Recursive Group Membership - This works back through the tree to find the group memberships for the user which can then be applied to the group map

I think you've replicated the functionality of the last option but I'm not entirely sure.

2009-02-22
Reviews: 1
Hello there,

I have the two joomlas: joomla 1.0 and joomla 1.5. joomla 1.5 is installed in subdirectory of joomla 1.0. f.e. www.joomla10.com/joomla15. I did sync registration so when user registered in 1.0 he also registered in 1.5. Now I need to make user who is logged in in jooma 1.0 also logged in in joomla 1.5 when he go to /joomla15 subdirectory. How can I solve this problem

Thank you
Owner's reply

The SOAP SSO tool might be able to provide you with what you need. It offers the ability to handle SSO requests between Joomla! sites. If possible please user the mailing list (see http://joomlacode.org/gf/project/jauthtools/mailman) for support requests.

2008-05-28
Reviews: 1
We've got a fairly substantial student-run project at my med school and LDAP is a mission-critical component. We've been prototyping for months and LDAP has been a constant source of headaches. Over that time I've seen jauthtools documentation improve substantially and today I finally sat down with one of the university's webdevs in his office and confirmed every character of every parameter. And now it works. In retrospect, jauthtools was never the weak link, but many miscommunications with at least four different developers over months of intermittent emails and phone conversations. I strongly recommend anyone new to LDAP find your network's ldap admin, sit in the room with them and compare the Joomla LDAP authentication plugin management screen to the configuration of an LDAP service they know is working. An known good httpd.conf file should have what you need for at least HTTP SSO.
2007-08-28
Reviews: 4
This extension works as advertised. Worked great for frontend logins out of box - the developer was even nice enough to get it working on the back end administrator for me as well!
2 of 2 people found this review helpful
2007-05-21
Reviews: 1
We are looking to use Joomla in education K - 12 and networks use mostly Novell's eDirectory, but there a some Windows 2003 AD networks as well. The LDAP auth system works very well, when all users are members of the same OU, but most schools keep there users for maintenance reasons in different OUs. When using the LDAP auth tools and configuring User DN: 'The [username] keyword is dynamically replaced by the user-provided login, so an example string is: uid=[username], dc=my-domain, dc=com. Several strings can be used, separated by semicolons.'
When configuring the string as: cn=[username],ou=staff,o=org;cn=[username],ou=students,o=org the search is shown as cn=name,ou=staff,o=org,ou=students,o=org which then has to fail. I have written several LDAP authentication mechanisms in PHP for AD and eDirectory. I am currently looking at Sam's code and see where it can be adjusted to provide that authentication where users are members of different OUs.
3 of 3 people found this review helpful
2007-05-06
Reviews: 1
I'm using it on my 2003 Active Directory corporate intranet site and I finally got it to work! Short of a total lack of serious documentation and no means to easily troubleshoot, it does it's job when it's configured properly. (a "Test Query" button on the Bot config screen would be GREAT). You MUST download the latest files.
It's also very picky about it's queries - you need to be a perfect match (no extra spaces, etc). I actually used Ethereal (a packet sniffer) to monitor the LDAP activity to figure out all the details of how it worked. Between Ethereal and looking at the code itself, it started to make sense.

I'm hosting on IIS, with integrated authentication on the whole site. I'm using Samuel's ldap bot, ldap sync bot, and the HTTP Single Signon. My users love it because they don't even see a login box - and yet it populates all the usual user fields and keeps them in sync with AD.

I'm using Community Builder and find that I still have to "approve" the user even the the auto-approve setting is enabled (at least so they can see their profile) but normal "registered" user functionality is there immediately.
If you have patience - it's a great tool.
2006-10-13
Reviews: 1
You will need to enable legacy mode to install it. Once installed it will show up in plugins.
1 of 1 people found this review helpful
2006-03-31
Reviews: 1
It's not recognized as a component, mambot or module.