Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter roko1

    (@roko1)

    Hi joern,

    This was exactly what I wanted to know! I’ve created a capability (which does nothing, but basically refers to the ability of viewing a certain page), and assigned this to the role. Now it works 🙂

    Thanks!

    roko1

    (@roko1)

    No problem, we are only here to make this plug-in better 😉

    roko1

    (@roko1)

    Concerning $ad_sso_domain:

    Line 38:
    $email = (empty($entries[0]["mail"][0]) ? $userid . '@' . $ad_sso_fqdn : $entries[0]["mail"][0]);

    Should be:
    $email = (empty($entries[0]["mail"][0]) ? $userid . '@' . $ad_sso_domain : $entries[0]["mail"][0]);

    The FQDN should not be seen as FQDN, but more as LDAP server.

    roko1

    (@roko1)

    Just started working on implementation of this plug-in, but unfortunately this plug-in isn’t really working OK by default, it requires a lot of editing.

    First off, the Shonu-fix should be implemented, but this has to be done on ad-sso-user.php, and not in ad-sso.php

    Second, line 22 is like this:
    $ldapCred = $ad_sso_username . '@' . $ad_sso_fqdn;

    Should be like this (otherwise the $ad_sso_domain variable isn’t even used):
    $ldapCred = $ad_sso_username . '@' . $ad_sso_domain;

    Sometimes you can get away with this if the FQDN is the same as domain, but in my case it wasn’t, so the script didn’t bind at all.

    Also, there are a lot of deprecated function calls, so this should be looked into in the future (dunno if the dev still works on this plug-in)

    To be continued?

Viewing 4 replies - 1 through 4 (of 4 total)