LDAP authentication in LS 2.00+

Mehr
5 Jahre 1 Monat her #86212 von rolando_isidoro
rolando_isidoro erstellte das Thema LDAP authentication in LS 2.00+
Hi,

I've been using a LS 1.92 setup with LDAP authentication via web server for sometime now. So far everything worked fine by using the instructions in the LS LDAP settings wiki article .

I'm now in the process of testing the LS 2.00+ upgrade and noticed the config files have suffered some changes, which means the LDAP settings require some changes too.

I've been debugging the source code and asked for help in the #limesurvey IRC channel (nickname gerundio) for a few days but still wasn't able to come up with a solution.

Thanks in advance for anyone who can help me out on this,
Rolando Isidoro

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #86215 von Mazi
Mazi antwortete auf das Thema: LDAP authentication in LS 2.00+
I will try to point our Limesurvey 1.x LDAP expert to this but I'm not sure if he will be able to help.


Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com'"

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #86218 von lemeur
lemeur antwortete auf das Thema: LDAP authentication in LS 2.00+

rolando_isidoro schrieb: LDAP authentication via web server


Hi,
Just to be sure, are you talking about either:
1- Delegating authentication for the LS admin GUI to your WebServer (using for instance mod_authnz_LDAP)
2- Or, configuring LS to use LDAP to import tokens in order to manage participants ?

Thibault

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #86220 von rolando_isidoro
rolando_isidoro antwortete auf das Thema: LDAP authentication in LS 2.00+
Hi,

I meant door #1 - Delegating authentication for the LS admin GUI to your WebServer (using for instance mod_authnz_LDAP).

Rolando Isidoro

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #86349 von rolando_isidoro
rolando_isidoro antwortete auf das Thema: LDAP authentication in LS 2.00+
Hi, just a little update on this topic.

I've spent some more time looking into the source code trying to figure out how to make this to work in the new version, but I'm realizing it just isn't possible yet.

I performed a grep on LS 1.92 source code and found references to the useWebserverAuth setting in the following files:
  • admin/usercontrol.php
  • common_functions.php
  • config.php
  • config-defaults.php

I made the same search on LS 2.00+ source code and this was the result:
  • application/config/config-defaults.php
  • application/controllers/admin/useraction.php

A closer look at the source code shows that the reference in the useraction.php is just related to whether or not to send an email upon a user creation.

Mazi, lemeur, any new thoughts on this?

Thanks in advance,
Rolando Isidoro

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #86695 von chinaski01
chinaski01 antwortete auf das Thema: LDAP authentication in LS 2.00+
I'm using LDAP authorization as well in a 1.9+ setup (web server handles authentication).I won't be able to migrate unless this piece of the puzzle works in v 2+.

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 1 Monat her #87233 von hermann
hermann antwortete auf das Thema: LDAP authentication in LS 2.00+
Hello Everyone

Sorry Rolando I cannot help you with that but I want to confirm this problem: When installing LimeSurvey I decided to take the 2.00+ Version. But now I am quite surprised to find useWebserverauth not working! I did the same as you did (searching the code for useWebserverauth and found the same as you did)...

Do I really have to downgrade to below 2.0 to get this feature?
Or may I be able to port the working implentation in 1.9 to 2.0?

Greetings
Hermann

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
5 Jahre 4 Wochen her #87367 von mdekker
mdekker antwortete auf das Thema: LDAP authentication in LS 2.00+
Could you please add this to our bug tracker and put a link to this topic in the Bugtracker (and maybe put a link here to the relevant bug) so it won't get lost?

---
Menno Dekker

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 11 Monate her #89958 von nicktruch
nicktruch antwortete auf das Thema: LDAP authentication in LS 2.00+
Any update concerning this topic ? How can we move on ?

Can somebody in LimeSurvey team can give us some clues so that we can get organized and maybe find a solution : developing a patch, doing some testing ... ?

Nicolas

PS. Did somebody add this to bug tracker as mdekker asked ?

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 11 Monate her - 4 Jahre 11 Monate her #89978 von mdekker
mdekker antwortete auf das Thema: LDAP authentication in LS 2.00+
EDIT:
It seems all is related to web auth and that has serval bugs (all closed)

bugs.limesurvey.org/view.php?id=7049
bugs.limesurvey.org/view.php?id=7021
bugs.limesurvey.org/view.php?id=6938
bugs.limesurvey.org/view.php?id=6871
bugs.limesurvey.org/view.php?id=6828

If still an issue, feel free to open a new ticket in our Bugtracker.

---
Menno Dekker
Letzte Änderung: 4 Jahre 11 Monate her von mdekker.

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 11 Monate her #89983 von nicktruch
nicktruch antwortete auf das Thema: LDAP authentication in LS 2.00+
No as far as you need to configure LS to use LDAP to import tokens in order to manage participants, it works fine. I think it was better to have the possibility to have a field to write your own 'userfilter' (like in v1.98), but it works !

I didn't check the authentication delegation for the LS admin GUI to our WebServer.

Thanks for your help.

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 7 Monate her #94553 von harnas1977
harnas1977 antwortete auf das Thema: LDAP authentication in LS 2.00+
Hi,

Can anyone confirm that LS 2.00+ has working LDAP authentication?
I'm in particularly interested to authenticate admins against MS AD.

Thanks,
Maciej

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 7 Monate her #94559 von mdekker
mdekker antwortete auf das Thema: LDAP authentication in LS 2.00+
At the moment this is not possible, but with the 2.05 beta that is just released you can write your own authentication plugin to handle loging in using LDAP. If you have the means to give that a try, please do so as we are still developing the plugin api and it helps to get feedback.

---
Menno Dekker

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 7 Monate her #94589 von DenisChenu
DenisChenu antwortete auf das Thema: LDAP authentication in LS 2.00+
Maybe you can use:
An apache server with mod_auth_LDAP : httpd.apache.org/docs/2.0/mod/mod_auth_LDAP.html
and
use elegate Authentication to the Webserver : docs.limesurvey.org/Optional+settings#De...ion_to_the_Webserver

Denis

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Bitte Anmelden um an der Konversation teilzunehmen.

Mehr
4 Jahre 5 Monate her #96836 von atlet
atlet antwortete auf das Thema: LDAP authentication in LS 2.00+

mdekker schrieb: At the moment this is not possible, but with the 2.05 beta that is just released you can write your own authentication plugin to handle loging in using LDAP. If you have the means to give that a try, please do so as we are still developing the plugin api and it helps to get feedback.


I also need to develop an authentication plugin. I looked at the documentation, and I can't find anything usable.

Where I put the plugin, where is the API, ...

Bitte Anmelden um an der Konversation teilzunehmen.

Jetzt loslegen!

Melden Sie sich jetzt an, und erstellen Sie in wenigen Minuten Ihre erste Umfrage.

Account einrichten

Abonnieren Sie unseren Newsletter

Abonnieren Sie unseren Newsletter für alle Neuigkeiten rund um LimeSurvey
captcha