http://adldap.sourceforge.net/wiki/ 2009-12-25T08:36:05+00:00 http://adldap.sourceforge.net/wiki/ http://adldap.sourceforge.net/wiki/lib/images/favicon.ico text/html 2008-09-24T22:44:08+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=apache&rev=1222296248 * * * Ubuntu aptitude install apache2 php5-ldap Redhat Enterprise Redhat Enterprise 5 up2date httpd php Redhat Enterprise 4 RHE4 comes with PHP4, we strongly recommend using PHP5 (PHP4 will be deprecated 31-12-2007). You will also need to upgrade the samba installations, mod_auth_ntlm_winbind has problems with the packaged version. text/html 2009-08-25T10:56:53+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api&rev=1251197813 This API is intended to be an accurate representation of the current version of the class. A great deal of knowledge is involved in the LDAP schema, so we actively encourage people to add to this documentation if you are able to improve it.... Server Requirements * PHP 5 As of adLDAP version 3.0, PHP 4 support is no longer supported, if you require PHP 4 support, please download adLDAP version 2.1. * LDAP extensions to PHP * An Active Directory domain controller to connect to, preferably… text/html 2009-11-17T17:15:47+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_changelog&rev=1258478147 This is the change log for adLDAP maintained since adLDAP version 3.0 Version 3.3 [+] New feature: Calling adLDAP without LDAP support in PHP will now throw an adLDAPException [+] New feature: Specifying a NULL $_base_dn will now automatically attempt to detect the base_dn from your domain controller [+] New feature: Most user objects can now be queried using a user's GUID as well as their username (samAccountName). Set the $isGUID optional parameter to true. To obtain a user's GUID either us… text/html 2009-06-12T09:07:52+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_computer_functions&rev=1244797672 computer_info($computer_name,$fields=NULL) Returns an array of information for a given computer. computer_ingroup($computer_name,$group,$recursive=NULL) adLDAP >= 3.2 Return true or false depending on whether a computer is a member of the group. text/html 2009-07-02T14:10:10+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_configuration&rev=1246543810 To use adLDAP you need to first define some important parameters, specifically the Domain Controller you wish to query and the base domain details of your Active Directory structure. You may also need to define a username and password of an account with higher privileges than your standard domain user account. text/html 2009-06-14T21:23:23+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_connections&rev=1245014603 constructor($options=array()) When instansiating adLDAP it will automatically make a connection to your Domain Controller using the settings defined within the class itself, see configuring variables require_once(dirname(__FILE__) . '/adLDAP.php'); $adldap = new adLDAP(); text/html 2009-07-17T09:57:35+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_contact_functions&rev=1247824655 adLDAP >= 3.0 Contacts in Active Directory are objects that allow storage of people contact information, that are not associated with a user account. All functions in this section require adLDAP version 3.0 or higher. contact_create($attributes) Creates an Active Directory contact and returns true or false depending on whether the creation worked or failed. text/html 2009-05-15T08:31:02+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_error_handling&rev=1242376262 When using adLDAP functions, many of the PHP fatal errors are supressed to allow continued execution of scripts and the return of false responses from a function. get_last_error adLDAP >= 3.0 This function allows you to return the last error message that Active Directory encountered. text/html 2009-10-27T10:28:59+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_examples&rev=1256639339 Here are just a few examples of what you can do with adLDAP. Read the full Developers API Reference to see what other functions are available. There's so much more than just authenticating and getting group/user information! Connecting to Active Directory require_once(dirname(__FILE__) . '/adLDAP.php'); $adldap = new adLDAP(); text/html 2009-12-23T21:35:07+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_exchange_functions&rev=1261604107 adLDAP >= 3.0 Creating Exchange mailboxes over PHP and LDAP has long been the holy grail for many developers, with a distinct lack of documentation and achieved purely from trial and error and researching all the Active Directory LDAP attributes. text/html 2009-06-25T11:19:34+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_exchange_functions_example&rev=1245928774 This page is designed to help walk you through creating a user and then creating an Exchange mailbox for that user using adLDAP. For the purposes of this walkthrough we will be creating a user called 'Test User' on a domain 'domain.local' Creating the User First we create the user account through adLDAP with text/html 2009-07-02T14:23:21+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_folder_functions&rev=1246544601 adLDAP >= 3.2 Understanding Folders, Objects and Containers Objects in Active Directory are known as Folders in adLDAP. Active directory is a logical grouping of users and computers in a domain, centrally managed by servers called domain controllers. An 'Active Directory' structure is a hierarchical framework of objects. The objects fall into three broad categories: resources (e.g., printers), services (e.g., email), and users (user accounts and groups). The AD provides information on the o… text/html 2009-10-27T10:33:21+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_group_functions&rev=1256639601 These are functions specifically aimed at group, querying and membership modifications. Groups in Active Directory can take the form of Security Groups or Distribution Lists, adLDAP supports the querying of both these types of groups. group_add_group($parent,$child) Adds the child group to the parent group and returns true or false. text/html 2009-06-05T10:22:43+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_overloading&rev=1244197363 adLDAP >= 3.2 Since adLDAP >= 3.0 the configuration options declared in the class itself are protected variables. That means they cannot be set from directly outside the class. You have always been able to set them at run time by passing an array to the adLDAP constructor. text/html 2009-05-15T09:25:35+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_schema&rev=1242379535 The schema is a set of attributes defined when modifying attributes to match against Active Directory objects. This schema is currently used in * user_create() * user_modify() * contact_create() * contact_modify() * exchange_add_address() * exchange_contact_mailenable() text/html 2009-11-30T12:28:34+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=api_user_functions&rev=1259584114 These are functions specifically aimed at user creation, querying and modification. authenticate($username,$password,$prevent_rebind=false) Authenticate the username/password of a user against a domain controller. If you are using Single Sign-on then you won't need to call authenticate() as you can let your Web server perform the work for you. However, in the case of single sign-on you will need to define an username and password to connect to your domain controller in the configuration. text/html 2009-06-05T10:08:02+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=ldap_over_ssl&rev=1244196482 Some AD objects can be modified without running an ldaps connection. Things like passwords however, cannot. This is a guide to getting ldaps running on a *nix machine. * * * * Install OpenSSL and OpenLDAP Duh :) I presume you've done this already. If not, check your distribution specific documentation. Check that you have IMAP and OpenSSL support by performing at text/html 2009-05-21T18:31:00+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=mod_auth_ntlm_winbind&rev=1242930660 mod_auth_ntlm_winbind Overview mod_auth_ntlm_winbind is a pretty cool Apache module that will do authentication against Active Directory with NTLM. I'm not a heavy participant in the Samba world, but huge Kudos have to go Tim Potter, Andrew Bartlett, and Ronan Waide (plus other awesome Samba rock stars). This module was originally known as mod_ntlm_winbind, but the name has been changed to be consistent with the Apache module naming scheme. text/html 2008-09-24T22:44:11+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=samba&rev=1222296251 This process isn't specific to the NTLM process, it's only how to join a server to the domain using Samba. mod_auth_ntlm_winbind will not function without a correctly configured Samba installation. The process is setting up Samba on the webserver to be a Domain Member Server. text/html 2008-10-22T18:29:17+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=seamless_authentication&rev=1224700157 Seamless authentication or Single Sign On (SSO) refers to where the browser does the authentication automatically for the user. No password is sent across the wire, they're all hashes (it's Samba voodoo). The protocol Microsoft uses to provide seamless browser authentation in a windows domain is called NTLM. More information on NTLM and the associated technologies are available at Wikipedia. Both Microsoft Internet Explorer and Mozilla Firefox readily support NTLM. text/html 2008-09-24T22:44:12+00:00 http://adldap.sourceforge.net/wiki/doku.php?id=start&rev=1222296252 * Configuring Apache * LDAP over SSL * Seamless Authentication * mod_auth_ntlm_winbind * Samba