Was this page helpful?

Authenticate LDAP users by email addresses

    Table of contents
    No headers

     

    A current use case brought up by a user is allowing end users to authenticate against MindTouch using their email that is stored in AD/LDAP but once logged in show the username for the user instead of the email.

    I was able to accomplish this using the following configuration values with my install (authenticating against AD):

     

    Key Value
    searchbase DC=domain,DC=com
    userquery mail=$1
    usernameattribute mail
    hostname domain.com
    bindingdn username@domain.com
    bindingpw password
    displayname-pattern {sAMAccountName}

     

    Note that the bindingdn you need you replace username with the user that you are allowing the AD/LDAP service to auth with and in turn that user's password would be in the bindingpw field.  Otherwise change the domain to match yours and you will be able to login with yourname@yourcompany.com and the username will be yourname.

    Was this page helpful?
    Tag page
    You must login to post a comment.

    Copyright © 2011 MindTouch, Inc. Powered by