vi config/core.php

< ?php
 class DATABASE_CONFIG {
        //This will be used for extensions/plugins.  if you plugin needs a db, define it here.
        var $default = array(
                'driver' => 'mysql',
                'persistent' => false,
                'host' => 'localhost',
                'login' => 'user',
                'password' => 'password',
                'database' => 'database_name',
                'prefix' => '',
        );
        var $ldap = array (
                'datasource' => 'ldap',
                'host' => 'localhost',
                'port' => 389,
                'basedn' => 'dc=analogrithems,dc=com',
                'login' => '',     //For Proxy Userdn
                'password' => '',  //For Proxy UserDN password
                'database' => '',  //Needed to prevent cakePHP from throwing errors about database missing
                'tls' => '', //Set this to true if using tls
                'type' => 'Netscape', //Type Can be either 'Netscape', 'OpenLDAP', 'ActiveDirectory'
                'version' => 3 //LDAP Version 3
         );
 }
?>

Firstly – thank you for this article and all of your efforts towards CakePHP’s LDAP integration!

I am having issues however. If I use the ldap_source listed in the article LDAP is properly queried however I have the issues above with blank output without debug and header already sent with debug on.

With the latest version of ldap_source on github I recieve the message “-1: Can’t contact LDAP server” – even though it works with the older version of ldap_source! Are there any changes that need to be made to the LdapAuth component to make it compatible with the latest version of the ldap_source datasource?

Many thanks!
Sean

/**
* Initialize method ensures Auth methods remain working as described in the book.
*/
function initialize(&$controller) {
parent::initialize($controller);
$controller->Auth =& $this;
}

Now every reference to $this->Auth is still valid.

To make things weirder, when that failed, it was returning nothing, which then got passed on to ldapauth, which for some reason would return 1 to the login function when the dn was empty. So I had a situation where anyone could log in with any username/password combo.

To solve this I first changed the getDn function to individually search the two OU’s set up in our AD where all valid users are stored (in sub OU’s). I then added a statement to ldapauth to return a zero if the dn was empty.

Technically the above getDn change I had already implemented in my controller and model due to the fact that our AD has a lot of extra stuff in many of the object records. As such a typical search someone would setup for ldap will return computer records and other special items (computers are tagged with objectclass=person for some odd reason), so I added a new line to the model that uses an array to hold multiple OU statements, then use a foreach loop to go through them, then a bit of logic to deal with getting the results back to something the system can deal with as it is.

I want to thank you for:
1) creating these ldap tools. They work well, and are pretty well thought out
2) for creating full documentation for how to do something in cakephp.

That second one is really what I appreciate most. As I start learning cakephp I tend to find plenty of articles and info on how to do things, but almost all of them require a pretty full knowledge of the logic behind cakephp. Having an article like this to reference which gives full working examples was EXTREMELY helpful.

I’d like to give more info, but I’m getting the infamous ‘Cannot modify header information – headers already sent by’ error. I’ve done my research, and typically that is caused by white space after the ?> tag, but I’ve searched all my files and do not have any with the extra whitespace outside of my view template files.

That being said, the one page that does load is my login page /users/login. When it is submitted I get the following on my mostly blank page:

1 search | scope: sub | cond: samaccountname=user | targetDn: dc=example,dc=com | order: 1: Operations error

I’m pretty sure that Operations error is an issue, but I’m not sure what is causing it. I have a bind user and password set in my Ldap config in the database config file, and they are obviously working since ldap lookups work fine (trust me, if the bind user can’t connect the lookups wouldn’t work!).

Any ideas? Any pointers? I’m going nuts trying to figure this out. Feel free to email me if you want more details or have other instructions.

I should note that I’m pretty new to cakephp, but have done a little bit of MVC php development.

The only other thing I can think of is changing the attribute on line 156
`$dn = $this->getDn(‘uid’, $uid);` to `$dn = $this->getDn(‘samaccountname’, $uid);` if you want to use a regular username format
of change it to `$dn = $this->getDn(‘userprincipalname’, $uid);` if you are going to use username@domain format

see http://www.computerperformance.co.uk/Logon/LDAP_attributes_active_directory.htm

Let me know if you have any trouble and I’ll to try to drum up an AD server to test my code against.

Thank You,