Forums

Open-Source LDAP Authentication with Yubikey two-factor support

Permalink 1 user found helpful
Hello everyone,

i have created an Concrete5 5.7 Package, which contains an AuthType for LDAP authentication. Additionally you can enable yubikey two-factor authentication. It is a basic implementation with no big features yet, but it is fully functional. If any one is interested in this package, feel free to grab it from github [1] and try it out. I'm looking forward to your feedback.

Regards,
go2sh
[1]https://github.com/go2sh/concrete5-ldap-login
 
jolson replied on at Permalink Reply
jolson
go2sh,

Thanks for your efforts -

I just downloaded your package to my dev site and when attempting to install get the following message:
Symfony\Component\ClassLoader\MapClassLoader::loadClass(): Failed opening required 'C:/xampp/htdocs/packages/ldap_login/controller.php' (include_path='C:\xampp\htdocs\concrete\vendor;.;C:\xampp\php\PEAR')

I am running 5.7 in a XAMPP environment on a WIN7 pc
jolson replied on at Permalink Reply
jolson
Ahhh,

I renamed the package directory to ldap_login and viola! it installed...

Will be testing,

Thanks again.
jolson replied on at Permalink Reply
jolson
While this let me install, it obviously breaks links in the controllers. Tried changing the pkgHandle in the pkg controller to match the folder name but that results in an error in the function getRelativePath after installation...

I guess I better read through your code little more carefully.
go2sh replied on at Permalink Reply
Hi jolson,

I'm sorry for your trouble. Yes the package directory need to be called ldap_login. Maybe you should reinstall it with the new name. There might be some wrong name in the database.

I have to admit that I didn't clone it before. I hope you'll get it running. Maybe I can help you? I'll update the github docs to make it clear.

Regards,
go2sh
go2sh replied on at Permalink Reply
Okay I just run a test with a fresh install. The directory needs to be called "ldap_login" at installation. Then everything runs fine. I'll hope this helps you. :)

Regards,
go2sh
jolson replied on at Permalink Reply
jolson
MrKDilkington replied on at Permalink Reply
MrKDilkington
This looks interesting, thank you go2sh.
apearcetbe replied on at Permalink Reply
Hi go2sh,

Thanks very much for sharing this! I was just wondering if anyone had got it working with Active Directory yet? I've tried the following with no luck:

LDAP Server URI - ldap://ad01.myserver.com
LDAP Base DN - OU=Users,OU=Company,DC=myserver,DC=com
LDAP Bind DN - CN=adbind,OU=ServerUsers,OU=Company,DC=myserver,DC=com
LDAP Bind Password - <password>
LDAP Search Filter - (samAccountName=%u)
Username LDAP Attribute - samAccountName

Both with and without registration. I've also tried a bunch of different search filters but I get errors with pretty much anything more complicated than the above. [Ex: (&(samAccountName=%u)(objectClass=OrganizationalPerson))]

Thanks in advance for anyone willing to take a look or drop feedback.