Results 1 to 3 of 3

Thread: authenticating dokuwiki to zimbra's openldap!

  1. #1
    Join Date
    Mar 2007
    Rep Power

    Thumbs up authenticating dokuwiki to zimbra's openldap!

    I couldn't just google the answer for this, so I just want to share my config with people in case they are trying to get their dokuwiki to authenticate to zimbra's openldap. Also, I'm a dokuwiki bigot it's awesome, almost as awesome as zimbra.

    I think, the key thing had to do with telling dokuwiki the right ldap schema (objectClass) to look at. At first I wasn't too sure about objectClass's, because I thought the posixAccount was something already in Zimbra, or I thought posixAccount was something that Zimbra's ldap schema was built "on top of" - but i'll have to take a closer look. Anyway looks like want I care about is zimbraAccount instead (this works for me).

    All this stuff goes in your ./conf/dokuwiki.conf - what this does is just authenticate user/password from zimbra's openldap:

    PHP Code:
    $conf['useacl']      = 1;
    $conf['openregister']= 0;
    $conf['authtype']    = 'ldap';

    $conf['auth']['ldap']['server']      = 'ldap://';
    $conf['auth']['ldap']['port']        = 389;
    $conf['auth']['ldap']['version']     = 3;

    # Optional debugging
    $conf['auth']['ldap']['debug']      = true;

    # ldap user info
    $conf['auth']['ldap']['usertree']    = 'ou=people,dc=xxxxxxxxx,dc=com';
    $conf['auth']['ldap']['userfilter']  = '(&(uid=%{user})(objectClass=zimbraAccount))'
    I'm still working on the Group (OU) lookup:

    PHP Code:
    #$conf['auth']['ldap']['grouptree']   = 'ou=people,dc=blah,dc=com';
    #$conf['auth']['ldap']['groupfilter'] = '(&(Member=%{ou})(objectClass=zimbraAccount))'; 
    (I'm guessing the lookup is fine, but at the moment, I'm not sure how I'd match up openldap groups to dokuwiki groups. Or if that is something I want to worry abou. Maybe I should define my access control within Dokuwiki. I guess the downside to this is I'm creating "sprawl" for access control policies/lists. But I think I'll revisit this problem when it truly becomes a problem for my needs.)

  2. #2
    Join Date
    Oct 2005
    Thatcher, AZ
    Rep Power


    Does this article help?
    LDAP Authentication - ZimbraWiki

  3. #3
    Join Date
    Aug 2010
    Rep Power


    This configuration works for dukuwiki:

    PHP Code:
    $conf['useacl'] = 1
    $conf['openregister'] = 0;
    $conf['authtype'] = 'ldap';

    $conf['auth']['ldap']['server'] = 'ldap://xxxxx.xx';       
    $conf['auth']['ldap']['port'] = 389;
    $conf['auth']['ldap']['version'] = 3;
    $conf['auth']['ldap']['usertree'] = 'uid=%{user},ou=people,dc=xxxxxxxx,dc=com';
    $conf['auth']['ldap']['debug'] = 1

Similar Threads

  1. Custom LDAP Server
    By KermitTheFragger in forum Developers
    Replies: 22
    Last Post: 12-30-2007, 01:48 PM
  2. Authenticating users by group using LDAP?
    By benton in forum Administrators
    Replies: 0
    Last Post: 07-13-2007, 04:42 PM
  3. Authenticating against Zimbra's LDAP Server
    By tstrimp in forum Developers
    Replies: 6
    Last Post: 03-16-2007, 09:26 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts