Package Data | |
---|---|
Maintainer Username: | cirkut |
Maintainer Contact: | josh@cirkut.net (Josh Allen) |
Package Create Date: | 2015-02-06 |
Package Last Update: | 2015-02-06 |
Language: | PHP |
License: | Unknown |
Last Refreshed: | 2024-10-27 15:04:33 |
Package Statistics | |
---|---|
Total Downloads: | 1 |
Monthly Downloads: | 0 |
Daily Downloads: | 0 |
Total Stars: | 0 |
Total Watchers: | 1 |
Total Forks: | 0 |
Total Open Issues: | 0 |
Laravel 4 Active Directory LDAP Authentication driver.
This will follow releases similar to how Laravel itself manages releases. When Laravel moves to 4.1 this package will move to 1.1, with minor versions signifying bug fixes, etc. To install this package add the following to your composer.json
require {
"ccovey/ldap-auth": "1.1.*",
}
Then run
composer install
or composer update
as appropriate
Once you have finished downloading the package from Packagist.org you need to tell your Application to use the LDAP service provider.
Open config/app.php
and find
Illuminate\Auth\AuthServiceProvider
and replace it with
Ccovey\LdapAuth\LdapAuthServiceProvider
This tells Laravel 4 to use the service provider from the vendor folder.
You also need to direct Auth to use the ldap driver instead of Eloquent or Database, edit config/auth.php
and change driver to ldap
To specify the username field to be used in app/config/auth.php
set a key / value pair 'username_field' => 'fieldname'
This will default to username
if you don't provide one.
To set up your adLDAP for connections to your domain controller, create a file app/config/adldap.php This will provide all the configuration values for your connection. For all configuration options an array like the one below should be provided.
It is important to note that the only required options are account_suffix
, base_dn
, and domain_controllers
The others provide either security or more information. If you don't want to use the others simply delete them.
return array(
'account_suffix' => "@domain.local",
'domain_controllers' => array("dc1.domain.local", "dc2.domain.local"), // An array of domains may be provided for load balancing.
'base_dn' => 'DC=domain,DC=local',
'admin_username' => 'user',
'admin_password' => 'password',
'real_primary_group' => true, // Returns the primary group (an educated guess).
'use_ssl' => true, // If TLS is true this MUST be false.
'use_tls' => false, // If SSL is true this MUST be false.
'recursive_groups' => true,
);
$guarded is now defaulted to all so to use a model you must change to $guarded = array()
. If you store Roles or similar sensitive information make sure that you add that to the guarded array.
Use of Auth
is the same as with the default service provider.
By Default this will have the username (samaccountname)
, displayname
, primary group
, as well as all groups user is a part of
To edit what is returned you can specify in config/auth.php
under the fields
key.
For more information on what fields from AD are available to you visit http://goo.gl/6jL4V
You may also get a complete user list for a specific OU by defining the userList
key and setting it to true
. You must also set the group
key that defined which OU to look at. Do not that on a large AD this may slow down the application.
You can still use a model with this implementation as well if you want. ldap-auth will take your fields from ldap and attach them to the model allowing you to access things such as roles / permissions from the model if the account is valid in Active Directory. It is also important to note that no authentication takes place off of the model. All authentication is done from Active Directory and if they are removed from AD but still in a users table they WILL NOT be able to log in.