Function update:
if((!$this->in_arrayi(‘userpassword’, $update))&& (isset($entry['userpassword']))){
=> password needs to be set, to unset. Found the problem, when updating entries without password (eg objectclass top).
same for the following lines:
if (isset($entry['count'])) { unset($entry['count']);}
if (isset($entry['dn'])) { unset($entry['dn']); }

For the return value of the function, I added a return true, if $entry is empthy (if you call update but nothing changes….)

To make the whole story to work with openldap, I changed all occurences of ‘attributetypes’ with ‘olcattributetypes’ and all occurences of ‘objectclasses’ with ‘objectclass’.
Then I made: $schemaDN = ‘cn=schema,cn=config’; (added cn=config).
Probably it would be a good thing to make this hardcoded things a config option in the database definition.

I still have problems with adding new entries, but give me some time to find out
Another trouble: Paging does not work (not implemented, needs limit of data) and Sort is also not working. Could you please tell me if sort is working for you ?

If you like my changes as a path, let me know.

Regards Benedikt

In your situation I would make my departments groupofuniquenames and follow the traditional ldap DIT (Directory information tree). Then include each users dn in that group. This make more sense in the long run also because if you are using something like apache to perhaps restrict access to a site (For example only billing department can access billing records page). Then you’ll be happy you followed the standard convention because you can tell apache only people in the group ‘cn=billing, ou=groups,dc=example,dc=org’ are allowed access. Also some people may be in multiple departments. What do you do then? In the group context it’s perfectly fine to have someone in multiple groups. From the IT perspective I’ve found I often place my IT people in each group to verify they work. This makes it easier for them to support the end users.

First of all, congratulations for your effort, is really useful.

I’ve just set it up and succesfully read (thats all i need for the app i’m doing) the users, but now i need some relations between ldap-sourced models and between ldap-sourced and sql-sourced models. I’ve seen that you implemented ‘generateassociationQuery’ but i can’t figure out what goes in the ‘foreignKey’ field.

For example, if i got a set of ou (departments), and inside each of them a set of users, how i say to cake that a user belongsTo a department?

Or maybe i’m just screwing it all up, because foreign key is a relational concept not applicable to ldap, and a i’ll be better making a full dn find to know the users that belong to a department.

Thanks in advance.

controller:

$user = $this->LdapAuth->user();
$this->set(compact(‘user’));

then can retrieve as

view:
echo $user['User']['mail']

And in my model I define my primary Key like this
// This would be the ldap equivalent to a primary key if your dn is
// in the format of uid=username, ou=people, dc=example, dc=com
var $primaryKey = ‘uid’;

Note though that depending on what your trying to model you can change the primaryKey, sometimes you want to look at your objects holistically so the primaryKey would be ‘dn’. Or if you are dealing with groups your primary key would be ‘cn’. This takes a little getting used to.

In My view I can then access the cn like this
< ?php echo $this->data['Person']['cn']; ?>