User role management with LDAP Groups

[alchris]

Hi,

I extended your code to fit the plugin to our needs.

I added the following features:

User's roles can be managed by OpenLDAP: The user's roles are allocated to LDAP Groups. If a user is member of a group, he obtains the matching role. The groups to roles allocation can be configured in the wordpress admin interface. If the user is not in an allocated group, a default role is used.

LDAP filter syntax is used to search for user dn and group dn. This makes the plugin much more flexible to different LDAP configurations. The filter can be configured in the admin interface.

After every login, the user details can be synchronized to the LDAP entries. This feature can be activated or deactivated in the wp admin interface.

In the default configuration, my code should behave like your default configuration.

It would be nice if you could merge some or even all of this features into your default code. So it would be much more easy for me to update the plugin.

Kind regards,
Christian

[koocotte]

I think your modifications in ldap_auth() require that you can search your directory with anonymous bind.

[clifgriffin]

I love the idea here, but I think it's a bit too much to merge into the current code base. Please feel free to port to the new code base and resubmit for review.

Note: I really want to keep the plugin using the entered username / password from he login form for any binds rather than requiring a separate bind username / password.

[wixaw]

Hi,
Is it intended to set up the non-anonymous connection?

[clifgriffin]

@Willouuu SLL uses the logging in customer's account to perform any read operations, so a separate authenticating account is not required. Does that answer your question?

[wixaw]

Hi @clifgriffin , no because my OpenLDAP ACL deny some attributes and group management no work.
I had to modify line 386 : $ldapbind = @ldap_bind($this->ldap, 'cn=userspe,ou=special,dc=domain,dc=fr', 'passwd');
Now I could not update this plugins without modifying this line every time