Discussion Forums  >  Plugins, Customizing, Source Code

Replies: 3    Views: 80

LoveSports
Aspiring developer
Profile
Posts: 8
Reg: Apr 19, 2013
Joondalup
80
09/15/13 09:45 PM (12 years ago)

BuzzTouch authentication with an LDAP server instead of MySQL table?

Just wondering if anyone has looked at integrating BT with an LDAP server so that BT users could be authenticated against an enterprise directory instead of the mysql database? Cheers Brendan
 
SmugWimp
Smugger than thou...
Profile
Posts: 6316
Reg: Nov 07, 2012
Tamuning, GU
81,410
like
09/16/13 12:03 AM (12 years ago)
Not that I'm aware of, but it shouldn't be too much of an exercise, if you're up on your PHP. The login basically calls for 'fnIsValidLogin' that can be found in class.User.php around line 118 That is where you would change the code. Leave the function parameters the same, and change the validation code to match against your LDAP server rather than the default MySQL server. Cheers! -- Smug
 
LoveSports
Aspiring developer
Profile
Posts: 8
Reg: Apr 19, 2013
Joondalup
80
like
09/16/13 12:48 AM (12 years ago)
Thanks Smug ... That answers the question I asked ... however there is another level to what I really meant to ask - I don't want to have different user attributes for the same user in 2 user repositories, so I would need to have a sync mapping between the LDAP server and the database. That's the bit that I'm worried about as I could really muck things up. Cheers Brendan
 
SmugWimp
Smugger than thou...
Profile
Posts: 6316
Reg: Nov 07, 2012
Tamuning, GU
81,410
like
09/16/13 02:36 AM (12 years ago)
"Total" integration would be a arduous task at best. You might create a script to automate user creation, so when they're created in the LDAP server, they can be created in the BT Server. "Most" of that information is almost benign. Just setup a bunch of defaults, and let BT do the rest once they log in. Since the only time the password seems to be tossed around is during initial login/authentication, you wouldn't need to populate the password in the userDB, because it's not accessed; the LDAP server is. This method would require that your 'fnIsValidLogin' method to access BOTH the LDAP and the MySQL Server, because the LDAP would authenticate, but then the MySQL needs to retrieve GUIDs and other unique values (which are created automatically by BT upon user creation) Cheers! -- Smug
 

Login + Screen Name Required to Post

pointerLogin to participate so you can start earning points. Once you're logged in (and have a screen name entered in your profile), you can subscribe to topics, follow users, and start learning how to make apps like the pros.