vb.org Archive - Integration with vBulletin - vBulletin Ldap Authentication Plugin

Page 1 of 3

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)

- - Integration with vBulletin - vBulletin Ldap Authentication Plugin (https://vborg.vbsupport.ru/showthread.php?t=148573)

malcolmx

05-30-2007 10:00 PM

vBulletin Ldap Authentication Plugin

I am using vbulletin for a long time now and before there was the plugin system introduces i hacked every single version of vb to enable ldap authentication. with the introduction of the plugin system i have written a little plugin that works in every version since VBulletin 3.5. This Plugin is the buyable VBulletin Ligh Authentication from http://www.sartori.at. now its FREE.

Since its working and i will not enhance this small plugin anymore, i will make it public. If there are any enhancements, i can put it into my versioning system and update this plugin.

In contrast to the ldap authentication from zemic my board can authenticate against every - already deployed - ldap directory without changeing the encryption type.

If the ldap user is not added in the VBulletin database, the user is automatically added the first time he authenticates against the ldap. if the user already exists then nothing is changed, except the authentication against the directory.

in the admin or moderator panel no user is authenticated against the directory.

Requirements

php with ldap support

Installation Notes:

copy ldapAuth directory to your vb forum installation directory
change the path to controller.php directory in ldap-plugin.xml
copy the hooks_ldap.xml to FORUM_ROOT/inclucdes/xml directory
in login.php search for:

PHP Code:

if ($vbulletin->GPC['vb_login_username'] == '') { eval(standard_error(fetch_error('badlogin', $vbulletin->options['bburl'], .... }

insert below:

PHP Code:

($hook = vBulletinHook::fetch_hook('ldap_login_hook')) ? eval($hook) : false;
activate plugin system (if not done already) in admincp
in admin cp import the product at "Download / Upload" Plugins
in global.php search for:

PHP Code:

$show['nopasswordempty']

and change:

PHP Code:

defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

to:

PHP Code:

defined('DISABLE_PASSWORD_CLEARING') ? 0 : 1;
configure the ldap settings in: ldapconfig.inc.php
test the product

Additional Notes:
If you are running a Microsoft Active Directory as Ldap server you have to change some settings to allow anonymous queries. This is described at
Novell and Microsoft

I would be happy if you support my modification in any way. Install or nominate it or donate some cents at paypal. :)

malcolmx

05-31-2007 02:40 PM

if anyone interested in working and extending this plugin take a look at http://overlord.fh-salzburg.ac.at/vblight/. I have installed a Wiki with SCM there. write me a message, and lets extend this baby.

Luky	05-31-2007 03:26 PM

How would you describe what this does so normal people can understand?

Hostboard

05-31-2007 03:32 PM

Quote:

Originally Posted by Luky (Post 1258410)

How would you describe what this does so normal people can understand?

Interesting how there is 2 LDAP authentification mods released so close to each other. Not sure how the 2 compare but there is a complete explaination of what LDAP is and how it works here> https://vborg.vbsupport.ru/showthread.php?t=145188

More or less if you don't need it/use it already for other network related work there is no need for you to install it.

malcolmx

05-31-2007 03:41 PM

Quote:

Originally Posted by Luky (Post 1258410)

How would you describe what this does so normal people can understand?

with my mod you can authenticate against a LDAP directory and not against the vbulletin user database.

malcolmx

05-31-2007 03:43 PM

Quote:

Originally Posted by Hostboard (Post 1258412)

i didnt want to release it some time ago. but since i do not have that much time anymore and alot of please want that stuff i release it now. when i have seen the lrease of zemic?s ldap authentication i thought "great" no need for mine anymore. but his plugin cannot authenticate against any ldap, so here is mine.

Hostboard

05-31-2007 05:03 PM

Though this is not something I can use at the moment it would be great if the 2 of you could come to terms and merge both into 1 product. The problem with VB.org is there tends to be 2, 3 or more sometimes of the same modification.

FreshFroot

06-01-2007 02:20 AM

nice hack, but I'm not much of a file editor.. I like to just leave file edits out, especially when upgrades come out for vB. Nice hack though :D

malcolmx

06-19-2007 05:55 PM

i changed the name of the mod to: "vBulletin Ldap Authentication Plugin"

-malc

Censtudios

07-09-2007 05:35 PM

I still have no idea what this mod does

chatzworld

07-09-2007 07:21 PM

LDAP Authentication is basically used for people to have a server (Microsoft or Novell) many schools, colleges, university's, company's, LDAP stores the user's account details i.e. username, full name, password, address, folders etc

Basically LDAP Authentication Plugins will allow you to use your users details on your Microsoft or Novell Server for user authentication insted of your MySQL (etc) database. Would manly ideal for schools, colleges, unis, or companys who want to run a forum, but use the user's computer logon details to logon to the forum

dodjer42

07-23-2007 11:18 PM

Does a user still need to register? Or do they automatically get ability to login from existing LDAP credentials?

fhs2006

07-24-2007 08:56 AM

a user can authenticate with the existing ldap user data. no need for registering with vbulletin.

-fhs

kthompso

08-10-2007 10:25 AM

includes/ldapAuth/controller.php line 104 shows:

Code:

verify_authentication($vbulletin->GPC['vb_login_username'], $vbulletin->GPC['cookieuser'], true);

includes/functions_login.php shows, line 134:

Code:

function verify_authentication($username, $password, $md5password, $md5password_utf, $cookieuser, $send_cookies)

This is giving us an error:

Code:

Warning: Missing argument 4 for verify_authentication(), called in /var/www/includes/ldapAuth/controller.php on line 94 and defined in /includes/functions_login.php on line 134



Warning: Missing argument 5 for verify_authentication(), called in /var/www/includes/ldapAuth/controller.php on line 94 and defined in /includes/functions_login.php on line 134



Warning: Missing argument 6 for verify_authentication(), called in /var/www/includes/ldapAuth/controller.php on line 94 and defined in /includes/functions_login.php on line 134

Any recommendations?

Zachery

08-10-2007 10:27 AM

Do you have LDAP support in php?

kthompso

08-10-2007 08:01 PM

Quote:

Originally Posted by Zachery (Post 1314327)

Do you have LDAP support in php?

Yes, LDAP is showing in PHPINFO(). That took a bit of learning too, but the restart of the apache enabled the LDAP in PHP after doing the apt-get on php5-ldap module.

The problem as documented about is that the verify_authentication function is expecting 6 variables , and we are only sending 3 in the controller.php. Should we just send dummy values for the password varibles?

Zachery

08-10-2007 08:49 PM

Not that I'm any expert on the subject but password is more than likely required.

sbhatia

08-13-2007 02:41 PM

In step 5, when I am trying to activate the plugin from admin control panel, what do I enter in the field "Plugin PHP Code" ?

Zachery

08-13-2007 06:28 PM

Turn on the hooks system in the admincp, it should be on if you've imported any other plugins or products.

sbhatia

08-13-2007 06:54 PM

if I goto Admincp >> Plugins & products >> Add new plugin:

I specify:

Product: vBulletin
Hook location: ldap_login_hook
Title:Ldap plugin
Execution Order: 5
Plugin PHP Code: <<I dont know what ?>>
Plugin is Active: Yes

I see this to be the only way of activating the plugin, but since I dont have the Plugin PHP Code, it says "Please Complete All Required Fields"

Thanks for the help !

Zachery

08-13-2007 07:03 PM

You need to add this to the product manager.

sbhatia

08-13-2007 07:30 PM

When I tried importing it from Product Manager, it gives following error message:
"This file appears to be a Plugin, not a Product. Please use the Plugin Manager to add this file."

So, I imported ./ldapAuth/ldap-plugin.xml and now it shows as plugin.........let me update you later.

Thanks :)

klabak

08-14-2007 06:46 PM

Hi,

i'm really new with this LDAP stuff but the LDAP server at my work does not support anonymous binds. Is that why this plugin is not working for me? I thought that when you put in your LDAP user name and password that you would be authenticating yourself that way.

Zachery

08-15-2007 12:56 AM

Quote:

Originally Posted by klabak (Post 1317539)

Quote:

Additional Notes:
If you are running a Microsoft Active Directory as Ldap server you have to change some settings to allow anonymous queries. This is described at
Novell and Microsoft

Maybe ;)

klabak

08-15-2007 01:05 PM

I'm running Vbulletin on Fedora 7 :)

sbhatia

08-15-2007 04:13 PM

It shows as a plugin, within the "Plugin System". But, when I try to login to vBulletin with any credientials (correct or incorrect), it just keeps on waiting for the page to load.

I've made sure that all the settings in ldapconfig.inc.php are correct. Please let me know, what additional changes I should be making !

upnorth

08-24-2007 06:44 PM

just looking for a little further info as to how this works with vBulletin? What I mean by this how does the security rights within vBulletin work with LDAP? Does LDAP just authenticate the password and then all other security is handled in vB with regards to forum access etc? If that is the case then is it an all or nothing? Just wondering what happens when a user is in LDAP but not setup on the board re access? or setup on the board but not in LDAP? ...hope that makes sense?

Ecordova

08-27-2007 11:08 PM

I installed everything as directed except when I try to log in on a blank page appears. This is occuring on the admincp panel as well. My company does not allow anonymous queries so I was given a username/pass for this specific project. Where would I use this information?

capbob

08-28-2007 04:23 PM

I've been trying to get this mod to work.

I've had to slightly alter it a bit to get it to work without needing anonymous queries. Now I've got it working to the point where it tries to create the user in vBulletin. When it get to this part of the controller.php file vBulletin gives me an error message saying Database error, the database has encountered a problem.

It happens when it tries to run the "$newuserid = $newuser->save();" command. Any ideas as to what the problem might be?

capbob

08-28-2007 08:08 PM

Downgrading for MySQL 5 to 4.1 fixed my problem.

kthompso

09-05-2007 12:00 AM

Return from LONG vacation. Problems still exist. Here is current status.

a) Yes, LDAP is enabled per PHPInfo().

b) After hacking the calls to verify_authentication in includes/ldapAuth/controller.php the behaviour changes and we have varied success but new users cannot join.
Here are the changes applied:

Code:

$ grep -n verify_authentication controller.php

94:    verify_authentication($vbulletin->GPC['vb_login_username'], dummy, dummy, dummy, $vbulletin->GPC['cookieuser'], true);

104:   verify_authentication($vbulletin->GPC['vb_login_username'], dummy, dummy, dummy, $vbulletin->GPC['cookieuser'], true);

The "dummy" variables were added to correct the function call.

Current Problem:
LDAP now works for one user (previously registered) and fails for another (never registered).
user kthompso is able to be deleted (via admincp or MySQL data row delete). User kthompso can then use LDAP to register and shows as logged in.

Another user (never having logged in before) is able to login with LDAP and it gives a success screen, but then returns to the NON-logged in screen. The user is NOT added to the vb_users table.

Why is ldapAuth/controller.php calling the variable with three parameters when 6 are required by includes/function_login.php

This LDAP integration is critical to our design. Any help is appreciated.

gabbs

09-12-2007 04:00 PM

I'm currently having some problems getting this plugin to work as well - after logging in I only get to see an empty screen (...login.php?do=login)

If anyone has some advice or if anyone experienced this problem as well, please let me know...

Thanks in advance!

hciisd

10-10-2007 02:32 PM

Anyone had any success modifying this to use ldap_bind instead? Then you would not have to use anonymous bind for Microsoft as an example. I've been playing around trying to change the ldap_connect to bind but not too much success unfortunately.

Cheers!

Mark Tomlinson

10-16-2007 03:33 PM

Nice hack, works like a charm. Except...

[S]I set up vBulletin with the usual "Admin" account. After adding the hack, I logged in as myself with my LDAP ID - which automagically created my user ID in the user database. Then I logged on as Admin again gave my user ID administrative permissions. (I'll be wanting to give a couple of other users subsets of admin privledges as well).

Well, what happens is that I can not log into the Admin CP with my LDAP ID.
* I can log into the forums with my LDAP ID just fine.
* And I can log into the Admin CP with 'Admin' just fine.
* But I can't log into the Admin CP with my LDAP ID.
* And I can't log into the forums with 'Admin'.
My theory here is that there is a different log-in process for the Admin CP and it is trying to verify my password against the vBulletin database.

Familiar with this problem? Am I just missing something?[/S]

Nevermind! Missed the comment in the description that says LDAP is not used for the admin or moderation control panels. That's not going to work for me. I need it to check the LDAP directory and the database in all cases. I will settle for just checking LDAP, but would rather it check both.

Sounds like I need to do some digging.

Mark Tomlinson

10-16-2007 03:53 PM

Thought I'd throw this out there for everyone's consideration. We're looking at using vBulletin for our intranet, so LDAP became very important. What also became important is that we remove any hint of anonymity. My LDAP ID, for instance, is A000657 - which says nothing about who I am. It would be far better if my full name appeared in my profile somewhere.

So here's what I did. I added a bit of code to controller.php that would retrieve my full name, location, and title from LDAP and stick them in the additional user profile fields. Then I went into the Admin CP and made sure the user can not modify these fields. Here's what the code looks like. The attributes "l", "title", and "fullName" may be different in your configuration.

PHP Code:


		
			
// get the email address from ldap

        $ldapConnection = ldap_connect($ldapServer, $ldapPort);

        if($ldapConnection)

        {

            $searchEmail=ldap_search($ldapConnection, $ldapBase, $ldapFilter, $ldapEmailAttr);

            $userEmail=ldap_get_entries($ldapConnection,$searchEmail);

            if(sizeof($userEmail) < 2)

            {

                $newuser->set('email', $noEmailExists);

            }

            else 

            {

                $newuser->set('email', $userEmail[0]['mail'][0]);

            }

//    ---- Modified by Mark Tomlinson - 10/15/2007 ----

            // get user attributes from ldap

            $searchField = ldap_search($ldapConnection, $ldapBase, $ldapFilter);

            $userAttributes = ldap_get_entries($ldapConnection, $searchField);



            // set fields

            $vbulletin->GPC['userfield']['field2'] = $userAttributes[0]['l'][0];

            $vbulletin->GPC['userfield']['field4'] = $userAttributes[0]['title'][0];

            $vbulletin->GPC['userfield']['field5'] = $userAttributes[0]['fullname'][0];

            $newuser->set_userfields($vbulletin->GPC['userfield'], true, 'admin'); 

//    ---- End Modifications ----

        } 

        ldap_close($ldapConnection);

Next up - plugging the full name and title in the signiture field.

Mark Tomlinson

10-16-2007 03:59 PM

Quote:

Originally Posted by gabbs (Post 1337700)

A blank page usually indicates a PHP error. You will want to double check your work and look in the Apache error_log for a clue.

If you are absolutly sure that all the code is correct, then the problem might be that you don't have the LDAP extension in PHP. Check your php.ini file for "extension=php_ldap.dll". If it's not there, you may need to reinstall PHP and include the LDAP extension.

razgrp

10-17-2007 02:29 PM

Gabbs - did you solve it? I am having the same problem and I dont have a clue.

malcolmx

10-18-2007 09:53 PM

he< guys, i am sorry i did not help anyone of you. was a really busy early/mid/end summer. i move to my new house, had wedding, was on honeymoon, at the university the winter semesters started, but now i do have more time again.

so anything i can help with, or any patch i should look at? any feature request?

thanks to those like, zachery, who helped others out of their problems. i read that one of you added that problem with displaying the "real" name. i solved that in another version of the plugin, probably ill add that stuff later on to this realease. (small database change and template change).

so then,

let the postin begin :)

-malc

malcolmx

10-18-2007 09:54 PM

Quote:

Originally Posted by gabbs (Post 1337700)

you are runnign linux or windows? can you please post the error message from the httpd error log?

-malc

Zachery

10-27-2007 05:00 PM

Does php have LDAP support compiled into it?

All times are GMT. The time now is 05:00 PM.

Page 1 of 3

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01780 seconds Memory Usage 1,868KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (6)bbcode_php_printable (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: