- Posts: 6
- Thank you received: 0
LDAP authentication in LS 2.00+
I've been using a LS 1.92 setup with LDAP authentication via web server for sometime now. So far everything worked fine by using the instructions in the LS LDAP settings wiki article .
I'm now in the process of testing the LS 2.00+ upgrade and noticed the config files have suffered some changes, which means the LDAP settings require some changes too.
I've been debugging the source code and asked for help in the #limesurvey IRC channel (nickname gerundio) for a few days but still wasn't able to come up with a solution.
Thanks in advance for anyone who can help me out on this,
Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
rolando_isidoro wrote: LDAP authentication via web server
Just to be sure, are you talking about either:
1- Delegating authentication for the LS admin GUI to your WebServer (using for instance mod_authnz_LDAP)
2- Or, configuring LS to use LDAP to import tokens in order to manage participants ?
I meant door #1 - Delegating authentication for the LS admin GUI to your WebServer (using for instance mod_authnz_LDAP).
I've spent some more time looking into the source code trying to figure out how to make this to work in the new version, but I'm realizing it just isn't possible yet.
I performed a grep on LS 1.92 source code and found references to the useWebserverAuth setting in the following files:
I made the same search on LS 2.00+ source code and this was the result:
A closer look at the source code shows that the reference in the useraction.php is just related to whether or not to send an email upon a user creation.
Mazi, lemeur, any new thoughts on this?
Thanks in advance,
Sorry Rolando I cannot help you with that but I want to confirm this problem: When installing LimeSurvey I decided to take the 2.00+ Version. But now I am quite surprised to find useWebserverauth not working! I did the same as you did (searching the code for useWebserverauth and found the same as you did)...
Do I really have to downgrade to below 2.0 to get this feature?
Or may I be able to port the working implentation in 1.9 to 2.0?
Can somebody in LimeSurvey team can give us some clues so that we can get organized and maybe find a solution : developing a patch, doing some testing ... ?
PS. Did somebody add this to bug tracker as mdekker asked ?
It seems all is related to web auth and that has serval bugs (all closed)
If still an issue, feel free to open a new ticket in our Bugtracker.
I didn't check the authentication delegation for the LS admin GUI to our WebServer.
Thanks for your help.
Can anyone confirm that LS 2.00+ has working LDAP authentication?
I'm in particularly interested to authenticate admins against MS AD.
- Posts: 8878
- Karma: 400
- Thank you received: 1469
An apache server with mod_auth_LDAP : httpd.apache.org/docs/2.0/mod/mod_auth_LDAP.html
use elegate Authentication to the Webserver : docs.limesurvey.org/Optional+settings#De...ion_to_the_Webserver
mdekker wrote: At the moment this is not possible, but with the 2.05 beta that is just released you can write your own authentication plugin to handle loging in using LDAP. If you have the means to give that a try, please do so as we are still developing the plugin api and it helps to get feedback.
I also need to develop an authentication plugin. I looked at the documentation, and I can't find anything usable.
Where I put the plugin, where is the API, ...