Line 1: |
Line 1: |
− | == LDAP for SME Server == | + | == LDAP for SME Server 8== |
− | {{Level|Advanced}}
| |
| | | |
| === Description === | | === Description === |
− | Adding LDAP authentication to sme was easy.
| + | LDAP authentication |
− | We just needed to add the attribute userPassword to the users entries in the ldap
| |
− | server and keep them in sync with the passwords stored in /etc/shadow.
| |
| | | |
− | For SME 8 only, and for simplicity LDAP remains readonly | + | For SME 8 only, LDAP is readonly |
| | | |
| This allows the use of SME user's database in other applications | | This allows the use of SME user's database in other applications |
Line 14: |
Line 11: |
| : on the local network, eg. another server in the local network which runs an ERP, but uses SME server user/group database | | : on the local network, eg. another server in the local network which runs an ERP, but uses SME server user/group database |
| : or even a remote host, eg. a GLPI instance used to manage requests from several clients using SME server. | | : or even a remote host, eg. a GLPI instance used to manage requests from several clients using SME server. |
− |
| |
− | Some applications have the possibility to use imap/pop authentication (egroupware, GLPI, maybe others), but some don't offer this possibility, but can use only LDAP. imap/pop isn't as powerful as LDAP as we can only check user/password, whereas with LDAP, we can check other attributes, groups of the user etc.
| |
| | | |
| === Installation === | | === Installation === |
− | SME 8 only, e-smith-ldap-5.2.0-5.el5.sme from smetest or smeupdates-testing | + | SME 8 beta 5 onwards |
− | | |
− | This rpm is currently held in the smetest repository, the following commands will install on your smeserver.
| |
− | | |
− | yum install e-smith-ldap --enablerepo=smetest --enablerepo=smeupdates-testing --exclude=*+ldap
| |
− | | |
− | no other package is needed, if it says it does it's an issue with the repos's, download manually and 'yum localinstall'
| |
− | | |
− | signal-event post-upgrade; signal-event reboot
| |
| | | |
| === Uninstall === | | === Uninstall === |
Line 36: |
Line 23: |
| | | |
| View your LDAP Schema, ObjectClasses and Attributes with [[:Phpldapadmin ]] | | View your LDAP Schema, ObjectClasses and Attributes with [[:Phpldapadmin ]] |
− | , This contrib works on sme8
| |
| | | |
| Example setups for different types of clients | | Example setups for different types of clients |
| | | |
| ==== SugarCRM ==== | | ==== SugarCRM ==== |
| + | |
| + | Applications should use anonymous bind, there is no need to use the LDAP root password |
| | | |
| : Enabled LDAP server | | : Enabled LDAP server |
Line 53: |
Line 41: |
| | | |
| === Bugs === | | === Bugs === |
− | Please raise bugs under the SME-Contribs section in [http://bugs.contribs.org/enter_bug.cgi bugzilla] | + | Please raise bugs under the SME Server 8 section |
− | and select the smeserver-? component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-?|title=this link}}.
| |
− | | |
− | <noinclude>[[Category: Contrib]]</noinclude>
| |