Active Directory Authentication

[upnorth]

Does anyone know of a hack for implementing active directory authentication on a vBulletin forum? I've done a lot of searching and all I can find is a couple of LDAP ones.

Any help would be greatly appreciated.

[Zebra]

We are looking also for this.. I think there is a market for it...

[cheesegrits]

I've actually been researching this recently. The problem is that by default AD stores the users password in simple unicode representation of the cleartext password. But vB MD5 hashes the password in the browser before sending it to login.php.

I think if you install Services for UNIX (SFU) on your AD, it can be configured to keep an MD5 hashed password in a new msSFU30password field. However, to retireve and compare this attribute you would have to use LDAPS rather than LDAP, i.e. configure a cert on your AD.

Anyway, I'll update this thread as and when I make any progress on this.

An alternative would be to build a mod which uses SAMBA's ntlm_auth or winbind mechanisms. Again, more news if I make any progress on that.

-- hugh

[Zebra]

We don't use UNIX etc. only windows with AD. But we hope that we find something.
Otherwise VB is exit..

[cheesegrits]

Well the "Services For UNIX" on the AD doesn't imply that you have to be running UNIX. What it does is add some functionality to the underlying LDAP store that makes it easier for non-Windows apps to play in the same LDAP sandbox. Specifically, it gives you the option of storing a copy of the windows password in MD5 hashed format, which solves the problem I outlined above.

-- hugh

[malcolmx]

to make it short. you can authenticate against active directory with ldap. Active directory is an ldap server with some extensions. so MS did the same as usual. take existing ideas, add something new and start the marketing..

i wrote an ldap plugin, which is available here. if you have any questions regarding this topic, do not hesitate to contact me.
https://vborg.vbsupport.ru/showthread.php?t=148573


maybe i did not understand the question? when authenticating it doesnt matter if the password is md5, sha or any other hash.

-malc

[dellusionaldude]

Thanks, MalcolmX. Is this available for vb 3.7?

[toscodav]

With this Plugin, Does the user still have to enter the username and Password?
We are looking for a single sign-on solution where the user is auto logged in when they log
into their PC.

Originally Posted by malcolmx

to make it short. you can authenticate against active directory with ldap. Active directory is an ldap server with some extensions. so MS did the same as usual. take existing ideas, add something new and start the marketing..

i wrote an ldap plugin, which is available here. if you have any questions regarding this topic, do not hesitate to contact me.
https://vborg.vbsupport.ru/showthread.php?t=148573


maybe i did not understand the question? when authenticating it doesnt matter if the password is md5, sha or any other hash.

-malc