=== Plugin Name === Contributors: clifgriffin Donate link: http://clifgriffin.com/code/donate/ Tags: LDAP, authentication, login, active directory, adLDAP Requires at least: 2.5.1 Tested up to: 2.7.1 Stable tag: 1.3 Integrating Wordpress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides the features you need with the simple configuration you want. It has everything you need to get started today. == Description == Having a single login for every service is a must in large organizations. This plugin allows you to integrate Wordpress with LDAP quickly and easily. = Features = * Supports Active Directory and OpenLDAP (and other directory systems which comply to the LDAP standard, such as OpenDS) * Includes three login modes: * * Normal Mode: Authenticates existing wordpress usernames against LDAP. This requires you to create all Wordpress accounts manually using the same user names as those in your LDAP directory. * * Account Creation Mode 1: Creates Wordpress accounts automatically for any LDAP user. * * Account Creation Mode 2: Creates Wordpress accounts automatically for LDAP users in a specific Group you specify. * Intuitive control panel. = Architecture = Simple LDAP Login redefines the main function Wordpress uses to authenticate users. In doing so, it makes several decisions. * Is the provided username a valid Wordpress user? * * If not, are we allowed to create a wordpress user? * * * If we are, are we able to authenticate the username and password provided against LDAP? * * * * If we are, does the user belong to the right (if any) group? * * * * * If the user does, create the wordpress user and log the user in. * * If the username is a valid wordpress user, is the password provided the same as the one in the Wordpress database? * * * If so, log the user in. * * * If not, do the provided credentials successfully authenticate against LDAP? * * * * If so, log the user in. This is simply a high level overview. The actual logic the plugin employs is more complex, but hopefully this gives you an idea, philosophically, about how the plugin accomplishes what it does. = Version History = **Version 1.3 Beta** * Support for both Active Directory and OpenLDAP. * The ability to create wordpress users automatically upon login based on LDAP group membership OR by LDAP authentication alone. * The ability to test domain settings straight from admin panel. * Announcements pane that allows me to update you with fixes, cautions, new beta versions, or other important information. **Version 1.2.0.1:** * Changed required user level for admin page to 10, Administrators only. **Version 1.2:** * Implemented multiple domain controllers. * Changed field sizes on admin page to be more user friendly. **Version 1.1:** * Moved settings to administration pages under settings. * Upgraded to latest version of adLDAP 2.1. * Got rid of credentials. (They are not neccessary for the authenticate function in adLDAP!) * Plugin is now upgrade proof. Settings are stored using Wordpress's setting functions. **Version 1.0:** * Original release. == Installation == 1. Upload the directory "simple-ldap-login" to the `/wp-content/plugins/` directory 1. Activate the plugin through the 'Plugins' menu in WordPress 1. Immediately update the settings to those that best match your environment by going to Settings -> Simple LDAP Login 1. If you don't get the settings right the first time...don't fret! Just use your wordpress credentials...they will always work! == Frequently Asked Questions == = Other than Wordpress, what does my system require? = If you are using Active Directory, you will probably need PHP 5. This is because I'm using adLDAP 3.0 to do my Active Directory integration. As far as I know, the rest of the code should work with PHP 4. It is also possible that the functionality I'm using with adLDAP 3.0 does not depend directly on PHP 5. Your mileage may vary. = How do I know what the correct settings are? = I have tried to make the settings as self-explanatory as possible. If you are struggling figuring them out, you may need to speak with your LDAP administrator. I realize this is an obnoxious response, but there is no good, fail proof way to help you discover these settings. A good place to start, if you're feeling daring, might be to use ADSIEdit for Windows and Active Directory, or GQ for Linux and OpenLDAP. = It's still not working, what other things can I try? = If you are confident your settings are correct and it still does not work, it may be time to check for port or firewall issues. If your LDAP server is running on a non-standard port or an obsolete version of the LDAP protocol you are going to have issues. Port 389 is the port this plugin, and nearly every other LDAP enabled software expects. They are also expecting protocol version 3. If you are using an old version of LDAP or running a non-standard port you may need to modify the code that the plugin runs or update your LDAP installation. Unfortunately I can't be relied upon to assist with these types of requests. I chose not to support these scenarios because they are infrequent and because they confuse everyone else. = It's still not working! How can I get help? = There are two ways. You can post a comment on my blog (http://clifgriffin.com/2009/05/13/simple-ldap-login-13-for-wordpress/) or you can e-mail me: me[at]clifgriffin.com. I'll do my best to get you up and running! == Screenshots == 1. The administration page under Settings -> Simple LDAP Login 2. Version 1.3 Beta administration page highlighting new features