LDAP settings/da - Revision history

FuzzyBot: Updating to match new version of source page

2026-06-29T14:30:05Z

Updating to match new version of source page

← Older revision		Revision as of 16:30, 29 June 2026
Line 1:		Line 1:
	<languages />		<languages />

	{{Alert\|title=Opmærksomhed\|text=Denne funktion tillader LimeSurvey-undersøgelsesadministratorer at importere tokens via LDAP. Hvis du har brug for en LDAP-godkendelse, se venligst [[Authentication plugins#LDAP\|AuthLDAP-plugin]].}}		<div class="mw-translate-fuzzy">
			{{Alert\|title=Opmærksomhed\|text=Denne funktion tillader LimeSurvey-undersøgelsesadministratorer at importere tokens via LDAP. Hvis du har brug for en LDAP-godkendelse, se venligst [[Authentication plugins#LDAP\|AuthLDAP-plugin]].}}
			</div>

	__TOC__		__TOC__

			<span id="General"></span>
	==Generelt==		==Generelt==

Line 20:		Line 23:
	)</pre>		)</pre>

			<span id="Defining_LDAP_servers"></span>
	== Definition af LDAP-servere==		== Definition af LDAP-servere==

Line 38:		Line 42:
	*'''$serverId++'''.		*'''$serverId++'''.

			<span id="Defining_queries_in_config/ldap.php"></span>
	== Definition af forespørgsler i config/ldap.php==		== Definition af forespørgsler i config/ldap.php==

Line 44:		Line 49:
	Se venligst filen config/ldap.php, da den indeholder eksempler på konfiguration.		Se venligst filen config/ldap.php, da den indeholder eksempler på konfiguration.

			<span id="Simple_Queries"></span>
	=== Simple forespørgsler===		=== Simple forespørgsler===

Line 63:		Line 69:
	*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'attr2']:''' Ldap-attribut, der vil blive knyttet til attribute_2-feltet.		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'attr2']:''' Ldap-attribut, der vil blive knyttet til attribute_2-feltet.

			<span id="Combined_Group_Queries_with_DN_members"></span>
	=== Kombinerede gruppeforespørgsler med DN-medlemmer===		=== Kombinerede gruppeforespørgsler med DN-medlemmer===

Line 86:		Line 93:
	*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userfilter']:''' Det er et filter, der gælder for hver brugerkandidatindgang (på dens attributter) for at tilføje endnu et valg.		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userfilter']:''' Det er et filter, der gælder for hver brugerkandidatindgang (på dens attributter) for at tilføje endnu et valg.

			<span id="Combined_Group_Queries_with_UID_members"></span>
	=== Kombinerede gruppeforespørgsler med UID-medlemmer===		=== Kombinerede gruppeforespørgsler med UID-medlemmer===

Line 110:		Line 118:
	*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userfilter']:''' Det er et filter, der gælder for hver brugerkandidatindgang (på dens attributter) for at tilføje endnu et valg.		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userfilter']:''' Det er et filter, der gælder for hver brugerkandidatindgang (på dens attributter) for at tilføje endnu et valg.

			<span id="What_about_Active_Directory?"></span>
	=== Hvad med Active Directory?===		=== Hvad med Active Directory?===

Maren.fritz: Created page with "Find flere oplysninger om Active Directory LDAP-strukturen på [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] og [https://msdn.micro..."

2024-01-02T08:38:42Z

Created page with "Find flere oplysninger om Active Directory LDAP-strukturen på [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] og [https://msdn.micro..."

← Older revision		Revision as of 10:38, 2 January 2024
Line 181:		Line 181:
	</syntaxhighlight>		</syntaxhighlight>

	Find ~~more information about the~~ Active Directory LDAP ~~structure on~~ [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] ~~and~~ [https://msdn.microsoft.com/en-us/library/cc223122.aspx Active Directory Technical Specification].		Find flere oplysninger om Active Directory LDAP-strukturen på [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] og [https://msdn.microsoft.com/en-us/ library/cc223122.aspx Active Directory Technical Specification].

Maren.fritz: Created page with " $ldap_queries[$query_id]['groupfilter'] = '(&(objectClass='''gruppe''')(cn=Domæneadministratorer))'; // AD bruger ikke standardattributnavnet til..."

2024-01-02T08:38:39Z

Created page with "<syntaxhighlight lang="php"> $ldap_queries[$query_id]['groupfilter'] = '(&(objectClass='''gruppe''')(cn=Domæneadministratorer))'; // AD bruger ikke standardattributnavnet til..."

← Older revision		Revision as of 10:38, 2 January 2024
Line 178:		Line 178:

	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">
	$ldap_queries[$query_id]['groupfilter'] = '(&(objectClass='''~~group~~''')(cn=~~Domain Admins~~))'; // AD ~~doesn't use the standard attribute name for groups~~, ~~so use this example instead~~.		$ldap_queries[$query_id]['groupfilter'] = '(&(objectClass='''gruppe''')(cn=Domæneadministratorer))'; // AD bruger ikke standardattributnavnet til grupper, så brug dette eksempel i stedet.
	</syntaxhighlight>		</syntaxhighlight>

	Find more information about the Active Directory LDAP structure on [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] and [https://msdn.microsoft.com/en-us/library/cc223122.aspx Active Directory Technical Specification].		Find more information about the Active Directory LDAP structure on [https://technet.microsoft.com/en-us/library/bb727030.aspx Active Directory Architecture] and [https://msdn.microsoft.com/en-us/library/cc223122.aspx Active Directory Technical Specification].

Maren.fritz: Created page with "Eksempel på gruppeforespørgsel:"

2024-01-02T08:38:37Z

Created page with "Eksempel på gruppeforespørgsel:"

← Older revision		Revision as of 10:38, 2 January 2024
Line 175:		Line 175:
	* Som foreslået i konfigurationsfilen, overvej at tilføje (!(email=*)) til dine brugerfiltre for at ignorere brugere uden e-mailadresse.		* Som foreslået i konfigurationsfilen, overvej at tilføje (!(email=*)) til dine brugerfiltre for at ignorere brugere uden e-mailadresse.

	~~Example group query~~:		Eksempel på gruppeforespørgsel:

	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">

Maren.fritz: Created page with "Et andet eksempel på brugerforespørgsel: $ldap_queries[$query_id]['userfilter'] = '(&('''objectCategory=Person''')(objectClass='''bruger''')(!(..."

2024-01-02T08:38:35Z

Created page with "Et andet eksempel på brugerforespørgsel: <syntaxhighlight lang="php"> $ldap_queries[$query_id]['userfilter'] = '(&('''objectCategory=Person''')(objectClass='''bruger''')(!(..."

← Older revision		Revision as of 10:38, 2 January 2024
Line 169:		Line 169:
	</syntaxhighlight>		</syntaxhighlight>

	~~Another example User query~~:		Et andet eksempel på brugerforespørgsel:
	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">
	$ldap_queries[$query_id]['userfilter'] = '(&('''objectCategory=Person''')(objectClass='''~~user~~''')(!('''userAccountControl=514''')))'; // AD ~~doesn't recognise enabled accounts in the~~ normal ~~way~~, ~~so instead~~, ~~we check users are not disabled~~		$ldap_queries[$query_id]['userfilter'] = '(&('''objectCategory=Person''')(objectClass='''bruger''')(!('''userAccountControl=514' '')))'; // AD genkender ikke aktiverede konti på normal vis, så i stedet kontrollerer vi, at brugerne ikke er deaktiveret
	</syntaxhighlight>		</syntaxhighlight>
	* ~~As suggested in the config file~~, ~~consider adding~~ (!(email=*)) ~~to your user filters to ignore users with no email address~~.		* Som foreslået i konfigurationsfilen, overvej at tilføje (!(email=*)) til dine brugerfiltre for at ignorere brugere uden e-mailadresse.

	Example group query:		Example group query:

Maren.fritz: Created page with " //Forbindelse til den aktive mappe Server: $serverId=0; $ldap_server[$serverId]['server'] = "10.10.10.10"; $ldap_server[$serverId]['port'] = "389"..."

2024-01-02T08:38:30Z

Created page with "<syntaxhighlight lang="php"> //Forbindelse til den aktive mappe Server: $serverId=0; $ldap_server[$serverId]['server'] = "10.10.10.10"; $ldap_server[$serverId]['port'] = "389"..."

← Older revision		Revision as of 10:38, 2 January 2024
Line 128:		Line 128:

	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">
	//~~Connection to the active directory~~ Server:		//Forbindelse til den aktive mappe Server:
	$serverId=0;		$serverId=0;
	$ldap_server[$serverId]['server'] = "10.10.10.10";		$ldap_server[$serverId]['server'] = "10.10.10.10";
	$ldap_server[$serverId]['port'] = "389";		$ldap_server[$serverId]['port'] = "389";
	$ldap_server[$serverId]['protoversion'] = "ldapv2";		$ldap_server[$serverId]['protoversion'] = "ldapv2";
	$ldap_server[$serverId]['encrypt'] = "~~none~~"; // ~~Most~~ AD LDAP ~~servers will not~~ have ~~encryption set by default~~		$ldap_server[$serverId]['encrypt'] = "ingen"; // De fleste AD LDAP-servere vil ikke have kryptering indstillet som standard
	$ldap_server[$serverId]['referrals'] = ~~false~~;		$ldap_server[$serverId]['referrals'] = falsk;
	$ldap_server[$serverId]['binddn'] = "~~domain~~\\~~user~~";		$ldap_server[$serverId]['binddn'] = "domæne\\bruger ";
	$ldap_server[$serverId]['bindpw'] = "~~userpassword~~";		$ldap_server[$serverId]['bindpw'] = "brugeradgangskode";
	//$ldap_server[$serverId]['binddn'] = "CN=~~user~~,OU=~~user_group~~,DC=xxx,DC=~~yyy~~"; ~~this one will not work with active directory~~, ~~that´s why you need to use~~ "domain\\user"		//$ldap_server[$serverId]['binddn'] = "CN=bruger,OU=brugergruppe,DC=xxx ,DC=ååå"; denne vil ikke fungere med Active Directory, derfor skal du bruge "domain\\user"
	//~~Here is a sample query for getting all active users of an active directory~~:		//Her er et eksempel på en forespørgsel til at få alle aktive brugere af en Active Directory:
	$query_id=0;		$query_id=0 ;
	$ldap_queries[$query_id]['ldapServerId'] = 0;		$ldap_queries[$query_id]['ldapServerId'] = 0;
	$ldap_queries[$query_id]['name'] = '~~Staff with an enabled account~~';		$ldap_queries[$query_id]['name'] = 'Personal med en aktiveret konto';
	$ldap_queries[$query_id]['userbase'] = 'OU=USER_GROUP,DC=xxx,DC=yyy';		$ldap_queries[$query_id] ['userbase'] = 'OU=USER_GROUP,DC=xxx,DC=yyy';
	$ldap_queries[$query_id]['userfilter'] = '(&(objectClass=user)(!(userAccountControl=514)))';		$ldap_queries[$query_id]['userfilter'] = '(&(objectClass=user)(!(userAccountControl=514))';
	//(!(userAccountControl=514)) ~~you are not able to ask~~ active directory for ~~an active user but you are able to ask for a non inactive user~~		//(!(userAccountControl=514)) du er ikke i stand til at spørge active directory for en aktiv bruger, men du kan bede om en ikke-inaktiv bruger
	$ldap_queries[$query_id]['userscope'] = 'sub';		$ldap_queries[$query_id][ 'userscope'] = 'sub';
	$ldap_queries[$query_id]['firstname_attr'] = '~~givenname~~';		$ldap_queries[$query_id]['firstname_attr'] = 'fornavn';
	$ldap_queries[$query_id]['lastname_attr'] = 'sn';		$ldap_queries[$query_id]['lastname_attr'] = 'sn';
	$ldap_queries[$query_id]['email_attr'] = 'mail';		$ldap_queries[$query_id]['email_attr'] = 'mail';
	$ldap_queries[$query_id]['token_attr'] = ''; // ~~Leave empty~~ for ~~Auto Token generation by~~ phpsv		$ldap_queries[$query_id]['token_attr'] = ''; // Lad være tomt for automatisk tokengenerering af phpsv
	$ldap_queries[$query_id]['language'] = '';		$ldap_queries[$query_id]['language'] = '';
	$ldap_queries[$query_id]['attr1'] = '';		$ldap_queries[$query_id]['attr1'] = '';
	$ldap_queries[$query_id]['attr2'] = '';		$ ldap_queries[$query_id]['attr2'] = '';
	//~~Group filtering was not possible in active directory~~, ~~you need to add the~~ memberOf ~~attribute of an user~~. ~~Here is a sample query for getting all active users that are member of the group~~ "samplegroup" in active directory:		//Gruppefiltrering var ikke mulig i Active Directory, du skal tilføje memberOf-attributten for en bruger. Her er et eksempel på en forespørgsel til at få alle aktive brugere, der er medlem af gruppen "samplegroup" i active directory:
	$query_id++;		$query_id++;
	$ldap_queries[$query_id]['ldapServerId'] = 0;		$ldap_queries[$query_id]['ldapServerId'] = 0;
	$ldap_queries[$query_id]['name'] = '~~All members of samplegroup~~';		$ ldap_queries[$query_id]['name'] = 'Alle medlemmer af prøvegruppen';
	$ldap_queries[$query_id]['userbase'] = 'OU=USER_GROUP,DC=xxx,DC=~~yyy~~';		$ldap_queries[$query_id]['userbase'] = 'OU=USER_GROUP,DC=xxx,DC=ååå';
	$ldap_queries[$query_id]['userfilter'] = '(&(objectClass=user)(memberOf=CN=samplegroup,OU=Group Global,OU=USER_GROUP,DC=xxx,DC=yyy)(!(userAccountControl=514)))';		$ldap_queries[$query_id]['userfilter'] = '(&(objectClass=user)(memberOf=CN=samplegroup,OU=Group Global,OU=USER_GROUP,DC=xxx,DC=yyy)(!(userAccountControl=514) )))';
	$ldap_queries[$query_id]['userscope'] = 'sub';		$ldap_queries[$query_id]['userscope'] = 'sub';
	$ldap_queries[$query_id]['firstname_attr'] = '~~givenname~~';		$ldap_queries[$query_id]['firstname_attr'] = 'fornavn';
	$ldap_queries[$query_id]['lastname_attr'] = 'sn';		$ldap_queries[$ query_id]['lastname_attr'] = 'sn';
	$ldap_queries[$query_id]['email_attr'] = 'mail';		$ldap_queries[$query_id]['email_attr'] = 'mail';
	$ldap_queries[$query_id]['token_attr'] = ''; // ~~Leave empty~~ for ~~Auto Token generation by~~ phpsv		$ldap_queries[$query_id]['token_attr'] = ''; // Lad være tomt for automatisk tokengenerering af phpsv
	$ldap_queries[$query_id]['language'] = '';		$ldap_queries[$query_id]['language'] = '';
	$ldap_queries[$query_id]['attr1'] = '';		$ldap_queries[$query_id]['attr1'] = '';
	$ldap_queries[$query_id]['attr2'] = '';		$ ldap_queries[$query_id]['attr2'] = '';
	</syntaxhighlight>		</syntaxhighlight>

Maren.fritz: Created page with "==> For eksempel, hvis din virksomhed ejer DNS-domænet 'my-company.com' og dit Windows-domæne er 'employees', så er din rodbase dc=employees,dc=my-company,dc=com * Brugere..."

2024-01-02T08:37:58Z

Created page with "==> For eksempel, hvis din virksomhed ejer DNS-domænet 'my-company.com' og dit Windows-domæne er 'employees', så er din rodbase dc=employees,dc=my-company,dc=com * Brugere..."

← Older revision		Revision as of 10:37, 2 January 2024
Line 117:		Line 117:
	* LDAP-rodbasen er dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1		* LDAP-rodbasen er dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1

	==> For ~~instance~~, ~~if your company owns the~~ DNS ~~domain~~ 'my-company.com' ~~and your~~ Windows ~~domain is~~ 'employees', ~~then your root base is~~ dc=employees,dc=my-company,dc=com		==> For eksempel, hvis din virksomhed ejer DNS-domænet 'my-company.com' og dit Windows-domæne er 'employees', så er din rodbase dc=employees,dc=my-company,dc=com
	* ~~Users and users-groups are stored below the~~ cn=~~Users~~,dc=~~my_windows_domain_name~~,dc=dns_suffix2,dc=dns_suffix1 (~~please note this is not~~ ou=~~users~~);		* Brugere og brugergrupper er gemt under cn=Brugere,dc=mit_vinduesdomænenavn,dc=dns_suffix2,dc=dns_suffix1 (bemærk venligst, at dette ikke er ou=brugere);
	* Active Directory ~~Groups~~:		* Active Directory-grupper:
	** ~~Groups objects contain~~ DN ~~of members in their~~ 'member' ~~attribute~~;		**-grupper objekter indeholder DN af medlemmer i deres 'member'-attribut;
	** ~~Group memberships are also stored in the~~ memberOf ~~attribute of each user entry~~. ~~This attribute contains DNs of groups the user belongs to~~;		** Gruppemedlemskaber gemmes også i memberOf-attributten for hver brugerpost. Denne attribut indeholder DN'er for grupper, som brugeren tilhører;
	** ~~some groups are in~~ CN=Builtin,dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1:		** nogle grupper er i CN=Builtin,dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1:
	*** For ~~instance~~: cn=Administrator,CN=~~Builtin~~,dc=~~my_windows_domain_name~~,dc=dns_suffix2,dc=dns_suffix1;		*** For eksempel: cn=Administrator,CN =Indbygget,dc=mit_vinduesdomænenavn,dc=dns_suffix2,dc=dns_suffix1;

	~~In some cases it is not as easy to query an active directory so here is a sample configuration~~ for ~~getting some infomations of an active directory~~:		I nogle tilfælde er det ikke så nemt at forespørge på et aktivt bibliotek, så her er et eksempel på en konfiguration for at få nogle oplysninger om en aktiv mappe:

	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">

Maren.fritz: Created page with "Active Directory (AD) er et Microsoft-register, der kan forespørges ved hjælp af LDAP-protokollen."

2024-01-02T08:37:52Z

Created page with "Active Directory (AD) er et Microsoft-register, der kan forespørges ved hjælp af LDAP-protokollen."

← Older revision		Revision as of 10:37, 2 January 2024
Line 114:		Line 114:
	Active Directory (AD) er et Microsoft-register, der kan forespørges ved hjælp af LDAP-protokollen.		Active Directory (AD) er et Microsoft-register, der kan forespørges ved hjælp af LDAP-protokollen.

	~~It is then possible to use its content for~~ LimeSurvey token ~~queries~~, ~~but this requires knowledge on how~~ AD ~~is organized~~.		Det er så muligt at bruge dets indhold til LimeSurvey token-forespørgsler, men dette kræver viden om, hvordan AD er organiseret.
	* ~~The~~ LDAP ~~root base is~~ dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1		* LDAP-rodbasen er dc=my_windows_domain_name,dc=dns_suffix2,dc=dns_suffix1

	==> For instance, if your company owns the DNS domain 'my-company.com' and your Windows domain is 'employees', then your root base is dc=employees,dc=my-company,dc=com		==> For instance, if your company owns the DNS domain 'my-company.com' and your Windows domain is 'employees', then your root base is dc=employees,dc=my-company,dc=com

Maren.fritz: Created page with "=== Hvad med Active Directory?==="

2024-01-02T08:37:50Z

Created page with "=== Hvad med Active Directory?==="

← Older revision		Revision as of 10:37, 2 January 2024
Line 112:		Line 112:
	=== Hvad med Active Directory?===		=== Hvad med Active Directory?===

	Active Directory (AD) ~~is a~~ Microsoft ~~registry that can be queried by using the~~ LDAP ~~protocol~~.		Active Directory (AD) er et Microsoft-register, der kan forespørges ved hjælp af LDAP-protokollen.

	It is then possible to use its content for LimeSurvey token queries, but this requires knowledge on how AD is organized.		It is then possible to use its content for LimeSurvey token queries, but this requires knowledge on how AD is organized.

Maren.fritz: Created page with "Du kan dog begrænse, hvilke af disse 'brugerkandidater', der vil blive valgt, ved at udfylde det automatiske brugerfilter, der beregnes fra medlems-UID'er. Dette er selvfølg..."

2024-01-02T08:37:49Z

Created page with "Du kan dog begrænse, hvilke af disse 'brugerkandidater', der vil blive valgt, ved at udfylde det automatiske brugerfilter, der beregnes fra medlems-UID'er. Dette er selvfølg..."

← Older revision		Revision as of 10:37, 2 January 2024
Line 105:		Line 105:
	På dette tidspunkt er alt sat op til at lade den første LDAP-søgning finde brugernes UID'er svarende til udvalgte grupper, og et brugersøgefilter vil automatisk blive udfyldt.		På dette tidspunkt er alt sat op til at lade den første LDAP-søgning finde brugernes UID'er svarende til udvalgte grupper, og et brugersøgefilter vil automatisk blive udfyldt.

	~~However~~, ~~you can restrict which of these~~ '~~user candidates~~' ~~will be selected by completing the automatic user filter computed from member UIDs. This is~~, ~~of course~~, ~~optional~~:		Du kan dog begrænse, hvilke af disse 'brugerkandidater', der vil blive valgt, ved at udfylde det automatiske brugerfilter, der beregnes fra medlems-UID'er. Dette er selvfølgelig valgfrit:
	*'''$ldap_queries<nowiki>[</nowiki>$query_id]<nowiki>[</nowiki>'userbase']:''' Base DN for ~~the user~~ LDAP ~~search~~ (~~only user candidate matching this~~ base) ~~will be selected~~;		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userbase']:''' Base DN for brugerens LDAP-søgning (kun brugerkandidat, der matcher denne base) vil blive valgt;
	*'''$ldap_queries<nowiki>[</nowiki>$query_id]<nowiki>[</nowiki>'userscope']:''' ~~Scope~~ for ~~the user~~ LDAP ~~search~~ (~~only user candidate matching the~~ userbase+scope) ~~will be selected~~;		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userscope']:''' Omfang for brugerens LDAP-søgning (kun brugerkandidat, der matcher userbase+scope) vil blive valgt;
	*'''$ldap_queries<nowiki>[</nowiki>$query_id]<nowiki>[</nowiki>'userfilter']:''' ~~It is a~~ filter ~~that applies to each user candidate entry~~ (~~on its attributes~~) ~~to add another selection~~.		*'''$ldap_queries<nowiki> [</nowiki> $query_id]<nowiki> [</nowiki> 'userfilter']:''' Det er et filter, der gælder for hver brugerkandidatindgang (på dens attributter) for at tilføje endnu et valg.

	=== ~~What about~~ Active Directory?===		=== Hvad med Active Directory?===

	Active Directory (AD) is a Microsoft registry that can be queried by using the LDAP protocol.		Active Directory (AD) is a Microsoft registry that can be queried by using the LDAP protocol.