With CakePHP 2.0 the authentication system has been completely redesigned to allow for extending the Auth component to allow other methods of authentication and authorization.  I finally sat down last weekend and updated my LDAPAuth component to work with the new version.  While I was doing it I added a few new features that people had been asking for. Also by updating this component I ended up also updating the Ldap Datasource. This included a lot of code cleanup as well. You can get the new code at https://github.com/analogrithems/idbroker/tree/dev_cake2.0 To get things going download the idbroker code from github and place it...

Read More

There have been many times where I need to have some sort of revision ability in my cake apps.  I've looked through the bakery and never found a very good clean solution.  I thought about it for a bit and it seems like a pretty simple thing to do, so I made a light weight simple behavior that provides this The behavior is built into a plugin because it also has an simple model(table) that it uses to store revisions for all the other tables.  The idea is that when ever you update your table this behavior will jump in, grab...

Read More

It's been over a year since I wrote the first version of the CakePHP LdapAuth & Ldap Datasource. What I've learned over the last year is that a simple component & datasource is not enough and it should really be a full plugin. So I started working on Idbroker. The new plugin offers the following * A ldap Datasource that bad been tested with Iplanet, Netscape Directory Server, OpenLDAP & Active Directory * A revised Ldap Auth component that works with CakePHP 1.3 * A simple application (Which is still in development) that uses both and will give great examples of how to...

Read More

So I've been trying to find a good way to discover the schema path in LDAP that would work across Netscape style ldap servers as well as Active Directory.  See the problem is each one hides their schema path in a different place.  Netscap style servers (Redhat-DS, Project 389, iPlanet, Sun One, etc) use 'cn=schema', while openldap has been known to use 'cn=subschema' and Active Directory uses  'CN=Schema, CN= Configuration, DC=forest_root_domain' this makes it really difficult to create a universal tool that can find any schema path.  In the past I would lift code from the PhpLDAPAdmin tool, but even...

Read More

So I was looking for a way to authenticate against LDAP with cake but I've found that it doesn't support it by default. I found one that checks the auth against ldap then creates a local mysql account. This also didn't use a actual ldap data sourc e either, it just handeled it's own ldap connection. After I read through the standard cakphp auth component I saw that it wouldn't be that hard to write an LDAP based auth component. First you need to download this file ldap_auth.php to your 'app/controllers/components/' directory. Then just like the original auth...

Read More

I've been using CakePHP for a while now and I've been thinking for a while it was time to see if I could give something back. As an IT leader I'm in love with LDAP. It makes life so simple for me and my team. The big downside to LDAP is it's not very easy to learn how all the objectClasses and attributes work with various applications. Microsoft has eliminated this with the Microsoft Management Console (MMC). It amazes me that no open source project has developed a tools such as this before. ...

Read More