http://css.dzone.com/news/wordpress-auto-sign-iis7-and

Hope it helps...

I assume it's quite significant what server WP is running on. Mine is internally running on Windows Server 2008 (SP2). I actually think it might even be possible to take of it on the server, but hell do I know.

Prior thread: http://wordpress.org/support/topic/multisite-and-ldap-logins

Plugin: http://wpmuldap.tuxdocs.net/

Thanks

David

You have to enter a string at "Group Settings" to "Allow": CN=Test List...

So, I achieved to use groups. But when I put the list at Groups/Allow then I can't log in with other ldpap account that I used before (it not belongs to that list).

Any help?

Thanks

Is this a solution to allow users of WordPress and Google Apps to unify their login, so they can log into both services simultaneously and with the same credentials?

Thanks.

John

I'm trying to configure LDAP Group Settings.

I enter the full dn at deny box, but It doesn't work.

Can anyone give an example to configure it?

Thanks

I'd be really interested in finding a solution. Which plugin did you use?

Overview of our WP Networks:
http://i.imgur.com/vG57n.png

We use
Wordpress MU Domain Mapping
WP Multi-Network
LDAP Authentication Plug-in

All our users authenticate against our central LDAP server. All our users can create a blog on our WP Network 1. This was the first available wordpress instance.
We created three WP networks with the WP multi-network plugin and mapped domains to each of it.
Now we encountered a problem in the case:
- The user has never logged in to any of the wp networks
- We add the user manually as Administrator (not network admin) in the WP Network 2
- After login to WP Network 2, everything works as expected.
But if the user now tries to create a personal blog in the WP-Network 1, WP is displays a error message:
"You attempted to access the "Domain 1 Network" dashboard, but you do not currently have privileges on this site. If you believe you should be able to access the "Domain 1 Network" dashboard, please contact your network administrator."

In the case the user first logs in to WP Network 1, and then gets added in WP Network 2 as an Administrator, everything works fine.

I really dont know if the error is related to the LDAP Plugin, the WP Multi-Network Plugin, WP itself or our multi Network setup (is there a best-practice document?)

However, while I was searching I found a plug-in that allowed WP users to signin using their AD credentials, but did not work as a single sign-on tho. If you'd be interested let me know and I'll give you the name of the plug-in.

Thanks

Thanks

I caught the same issue with my WordPress installations when upgrading from PHP 5.1.6 to PHP 5.3.3. -> WPMU LDAP plugin broke in the same manner (allowing only local users aka admin to login usccesfully).

I posted about it in the authors forum here:
http://wpmuldap.tuxdocs.net/2011/03/23/wpmu-ldap-3-1-1-released/#comment-5398

I'm assuming you're using the same plugin as I am, and unfortunately that plugin is not in Wordpresses plugin repository, so I'd say asking for help in that matter won't catch the author's attention.

Let's hope that we'll get a response and a fix asap!

The only area to log in is the admin dashboard. I do not have a log in for general users when visiting the site. As such, there is no logout button in the theme. This is ONLY for the admin section of wordpress. Comments are turned off.

This is running on Windows Server 2008 R2 with IIS and PHP. I am using an LDAP plugin. Below is my web.config.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
    <httpErrors errorMode="Custom"/>
    <rewrite>
      <rules><rule name="Main Rule" stopProcessing="true"><match url=".*"/><conditions logicalGrouping="MatchAll"><add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true"/><add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true"/></conditions><action type="Rewrite" url="index.php/{R:0}"/></rule>
				<rule name="wordpress" patternSyntax="Wildcard">
					<match url="*"/>
						<conditions>
							<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true"/>
							<add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true"/>
						</conditions>
					<action type="Rewrite" url="index.php"/>
				</rule></rules>
    </rewrite>
    <defaultDocument>
      <files>
        <clear/>
        <add value="index.php"/>
      </files>
    </defaultDocument>
  </system.webServer>
</configuration>

Let me know if there is anything else I need to provide to help solve this issue. Thanks in advance!

I have managed to get this plugin to authenticate my users against my LDAP directory. However, I'm wondering if there is anyone out there who can help me with mapping the various fields (I'm mainly concerned about the password expiry and reset attributes) to my directory as I'm a little confused (no to mention kinda new at both WP and LDAP).

Or maybe someone could point me in the right direction if said help already exists.

Cheers

Drop me a note: http://aaron.axelsen.us/feedback/form

both my WP site and the LDAP are hosted on the same server - so as far as the plugin is concerned, it is only doing a lookup on the same local network. In any case, you will need to make sure the port for LDAP (i believe it is 389) is open on any internal firewall.

My setting for simple-ldap-authentication are:

Ldap server: server.companyname.private
Base DN = dc=server, dc=companyname, dc=private
user id search filer - uid

simple-ldap-authentication was a breeze to set up. but I am having issues with the other 2 AD plugins that were suggested above.

What setting should I be using for 'domain controller'? as I am not using an AD. My server hostname syntax is 'server.companyname.private'.

We have our settings to:

LDAP Directory: OpenLDAP
Account Suffix: @'ourdomain.org'
LDAP Login Attribute: uid
Base DN: dc=od, dc='ourdomain', dc=org
Domain Controller: 'ourdomain'

All of this seems obvious but we are failing. Did you do anything in the 'Advanced' setting?

Was there anything you needed to do on a firewall?

@kwgagel, @semir - the two plugins you suggested - will they work with other LDAP setups or just AD? I am running a Mac OS server with Open Directory and cannot get either of these two plugins to authenticate against the LDAP directory. Even when I set both the server and base DN settings to settings that work with simple-ldap-authentication.

To give you and idea, my LDAP sever syntax is server.companyname.private. Therefore, my base dn should be dc=server,dc=companyname,dc=private am I correct? every time I attempt to authenticate using the test tool in active directory integration, I get the 'authentication failed' error. What am I missing here?

Any help is much appreciated. These plugins look much like what I need - if I can get them to work :)

I know next to nothing about PHP so I was wondering if someone here may be able to help.

I would like to develop a way to reset an LDAP password from within word press.

I am currently using a combination of the force user login and the Simple LDAP Authentication plugins to authenticate my users against LDAP. I would like the users' passwords to expire and for the wordpress login screen to advise them of this and allow them to click a link to reset the password. Preferably I would like to integrate the function with the existing Simple LDAP plugin.

I am aware that most of this functionality currently exists but none currently links into LDAP. I have a few links to existing scripts that I will put at the bottom of this post.

I have a Mac OS server with Open directory that the code can be tested on.

If anyone is interested in this project, I would be keen to team up (and learn some PHP at the same time).

Cheers
Malcolm

http://logout.sh/computers/ldap/
http://hintsforums.macworld.com/archive/index.php/t-64368.html
http://www.warden.pl/2009/09/02/php-ldap-change-password-page/
http://www.karylstein.com/phpLdapPasswd
http://blather.michaelwlucas.com/archives/654