广告赞助

Posts Tagged ‘AD’

redmine是一款基于ruby的项目管理平台。

在处理多个系统用户统一认证的时候需要用到windows Active Directory认证

以下是官网的配置方式的LDAP认证:

Name = My Directory
Host = host.domain.org
Port = 389
LDAPS = no
Account = MyDomain\UserName (or UserName@MyDomain depending on AD server)
Password = <password>
Base DN = CN=users,DC=host,DC=domain,DC=org
On-the-fly user creation = yes
Attributes
Login = sAMAccountName
Firstname = givenName
Lastname = sN
Email = mail

重点是需要填入一个能访问AD的用户,辅助工具可有SysinternalsSuite工具集中的ADExplorer.exe

mantis的用户认证函数Authentication中相关有

$g_login_method
  • MD5
  • LDAP
  • PLAIN
  • CRYPT
  • CRYPT_FULL_SALT
  • BASIC_AUTH
  • Some systems (mostly non-unix) do not have crypt support in PHP. MD5 will accomplish almost the same thing. PLAIN is plain text and there is no attempt to secure the password in the database. You will not be able to easily convert between encryption methods so this needs to be chosen at install time. CRYPT was the default until 0.17.0; MD5 is now the default. Try CRYPT_FULL_SALT if CRYPT is not working.

$g_ldap_server The ldap server (eg: ldaps://ldap.example.com
$g_ldap_port LDAP port (default 636).
$g_ldap_root_dn “dc=example, dc=com”
$g_ldap_organisation “organizationname=*Example)”
$g_use_ldap_email Use email address in LDAP rather than the email stored in the database.
$g_ldap_bind_dn “cn=Manager, dc=example, dc=com”
$g_ldap_bind_passwd

阅读更多 »