Authenticate a user via LDAP

Permalink
I want to be able to authenticate a user via LDAP. Without getting into the LDAP details, my questions is more about the concrete5 side of it. Assuming that I've done the LDAP connection and verified that user exists in the AD and got the proper response, what happens then? I can't seem to find any documentation or examples of what to do next?

* Should I then create that user in the concrete database locally and use that local user to set as the logged in user? This doesn't seem optimal as there would be redundant user information locally and on the LDAP server (true source.)

* Or am I able to somehow set those user credentials as the logged in user (even though no such user exists in the concrete database?)

* Or am I missing something fundamental about this?

Sorry, I wouldn't be asking such an open ended question if there were more documentation/examples available.

TIA

 
mnakalay replied on at Permalink Reply
mnakalay
Hello,

One option to make your life much easier would be to buy the LDAP package from the marketplace. It's pricey but has a high reputation and would save you plenty of time.

https://www.concrete5.org/marketplace/addons/exchangecore-ldap-authe...

On the other hand, you could also look at a free much simpler alternative hosted on Github that might give you the pointers you need.

https://github.com/go2sh/concrete5-ldap-login...

I do not know if it works or not I haven't tried it but the code looks sound.

I hope this helps