mirror of
https://github.com/nitnelave/lldap.git
synced 2023-04-12 14:25:13 +00:00
Add example configuration for dolibarr
This commit is contained in:
parent
c7f45b12ac
commit
cb84f7f387
90
example_configs/dolibarr.md
Normal file
90
example_configs/dolibarr.md
Normal file
@ -0,0 +1,90 @@
|
|||||||
|
# Configuration pour Dolibarr
|
||||||
|
|
||||||
|
This example will help you to create user in dolibarr from your users in your lldap server from a specific group and to login with the password from the lldap server.
|
||||||
|
|
||||||
|
## To connect ldap->dolibarr
|
||||||
|
|
||||||
|
In Dolibarr, install the LDAP module from Home -> Modules/Applications
|
||||||
|
Go to the configuration of this module and fill it like this:
|
||||||
|
|
||||||
|
|
||||||
|
- Users and groups synchronization: `LDAP -> Dolibarr`
|
||||||
|
- Contacts' synchronization: `No`
|
||||||
|
- Type: `OpenLdap`
|
||||||
|
- Version: `Version 3`
|
||||||
|
- Primary server: `ldap://example.com`
|
||||||
|
- Secondary server: `Empty`
|
||||||
|
- Server port: port `3890`
|
||||||
|
- Server DN: `dc=example,dc=com`
|
||||||
|
- Use TLS: `No`
|
||||||
|
- Administrator DN: `cn=admin,ou=people,dc=example,dc=com`
|
||||||
|
- Administrator password: `secret`
|
||||||
|
|
||||||
|
Click on modify then "TEST LDAP CONNECTION".
|
||||||
|
You should get this result on the bottom:
|
||||||
|
```
|
||||||
|
TCP connect to LDAP server successful (Server=ldap://example.com, Port=389)
|
||||||
|
Connect/Authenticate to LDAP server successful (Server=ldap://example.com, Port=389, Admin=cn=admin,ou=people,dc=example,dc=com, Password=**********)
|
||||||
|
LDAP server configured for version 3
|
||||||
|
```
|
||||||
|
|
||||||
|
And two new tabs will appear on the top:
|
||||||
|
Users and Groups
|
||||||
|
|
||||||
|
We will use only Users in this example to get the users we want to import.
|
||||||
|
The tab Groups would be to import groups.
|
||||||
|
|
||||||
|
Click on the Users tab and fill it like this:
|
||||||
|
- Users' DN: `ou=people,dc=example,dc=com`
|
||||||
|
- List of objectClass: `person`
|
||||||
|
- Search filter: `memberOf=cn=yournamegroup,ou=groups,dc=example,dc=com`
|
||||||
|
|
||||||
|
(or if you don't have a group for your users, leave the search filter empty)
|
||||||
|
|
||||||
|
- Full name: `cn`
|
||||||
|
- Name: `sn`
|
||||||
|
- First name: `givenname`
|
||||||
|
- Login `uid`
|
||||||
|
- Email address `mail`
|
||||||
|
|
||||||
|
Click on "MODIFY" and then on "TEST A LDAP SEARCH"
|
||||||
|
|
||||||
|
You should get the number of users in the group or all users if you didn't use a filter.
|
||||||
|
|
||||||
|
|
||||||
|
## To import ldap users into the dolibarr database (needed to login with those users):
|
||||||
|
|
||||||
|
Navigate to Users & Groups -> New Users
|
||||||
|
Click on the blank form "Users in LDAP database", you will get the list of the users in the group filled above. With the "GET" button, you will import the selected user.
|
||||||
|
|
||||||
|
|
||||||
|
## To enable LDAP login:
|
||||||
|
|
||||||
|
Modify your `conf.php` in your dolibarr folder in `htdocs/conf`
|
||||||
|
Replace
|
||||||
|
```
|
||||||
|
// Authentication settings
|
||||||
|
$dolibarr_main_authentication='dolibarr';
|
||||||
|
```
|
||||||
|
|
||||||
|
with:
|
||||||
|
```
|
||||||
|
// Authentication settings
|
||||||
|
// Only add "ldap" to only login using the ldap server, or/and "dolibar" to compare with local users. In any case, you need to have the user existing in dolibarr.
|
||||||
|
$dolibarr_main_authentication='ldap,dolibarr';
|
||||||
|
$dolibarr_main_auth_ldap_host='ldap://127.0.0.1:3890';
|
||||||
|
$dolibarr_main_auth_ldap_port='3890';
|
||||||
|
$dolibarr_main_auth_ldap_version='3';
|
||||||
|
$dolibarr_main_auth_ldap_servertype='openldap';
|
||||||
|
$dolibarr_main_auth_ldap_login_attribute='cn';
|
||||||
|
$dolibarr_main_auth_ldap_dn='ou=people,dc=example,dc=com';
|
||||||
|
$dolibarr_main_auth_ldap_admin_login='cn=admin,ou=people,dc=example,dc=com';
|
||||||
|
$dolibarr_main_auth_ldap_admin_pass='secret';
|
||||||
|
```
|
||||||
|
|
||||||
|
You can add this line to enable debug in case anything is wrong:
|
||||||
|
```
|
||||||
|
$dolibarr_main_auth_ldap_debug='true';
|
||||||
|
```
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user