ldap?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
11 messages Options
Reply | Threaded
Open this post in threaded view
|

ldap?

Si Chen-2
Hi.

Has anybody integrated ofbiz with LDAP or has plans to do so?  It  
seemed like there was some discussion about a year ago.

Si
Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Adrian Crum
Search the Wiki for "LDAP Integration"


Si Chen wrote:
> Hi.
>
> Has anybody integrated ofbiz with LDAP or has plans to do so?  It  
> seemed like there was some discussion about a year ago.
>
> Si
>
Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Si Chen-2
but has anything been done?

On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:

> Search the Wiki for "LDAP Integration"
>
>
> Si Chen wrote:
>> Hi.
>> Has anybody integrated ofbiz with LDAP or has plans to do so?  It  
>> seemed like there was some discussion about a year ago.
>> Si

Reply | Threaded
Open this post in threaded view
|

Re: ldap?

David E Jones-2

I did some analysis for Integral a while back for possible ways of  
doing this, mostly on a tool level. If they are okay with it I  
wouldn't mind posting the resulting document.

-David


On Sep 6, 2006, at 4:08 PM, Si Chen wrote:

> but has anything been done?
>
> On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>
>> Search the Wiki for "LDAP Integration"
>>
>>
>> Si Chen wrote:
>>> Hi.
>>> Has anybody integrated ofbiz with LDAP or has plans to do so?  
>>> It  seemed like there was some discussion about a year ago.
>>> Si
>

Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Si Chen-2
That'd be great.

Si

On Sep 6, 2006, at 3:13 PM, David E Jones wrote:

>
> I did some analysis for Integral a while back for possible ways of  
> doing this, mostly on a tool level. If they are okay with it I  
> wouldn't mind posting the resulting document.
>
> -David
>
>
> On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>
>> but has anything been done?
>>
>> On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>
>>> Search the Wiki for "LDAP Integration"
>>>
>>>
>>> Si Chen wrote:
>>>> Hi.
>>>> Has anybody integrated ofbiz with LDAP or has plans to do so?  
>>>> It  seemed like there was some discussion about a year ago.
>>>> Si
>>

Reply | Threaded
Open this post in threaded view
|

RE: ldap?

Chris Chesney
In reply to this post by Si Chen-2
David,

Yes, you can post the document.  We're still interested in moving
forward on this at some point - just need to convince the client.  We
have implemented a slimmed down version that overrides the login
services to use Active Directory for authentication.

-Chris

> -----Original Message-----
> From: David E Jones [mailto:[hidden email]]
> Sent: Wednesday, September 06, 2006 5:14 PM
> To: [hidden email]
> Subject: Re: ldap?
>
>
> I did some analysis for Integral a while back for possible ways of
> doing this, mostly on a tool level. If they are okay with it I
> wouldn't mind posting the resulting document.
>
> -David
>
>
> On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>
> > but has anything been done?
> >
> > On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
> >
> >> Search the Wiki for "LDAP Integration"
> >>
> >>
> >> Si Chen wrote:
> >>> Hi.
> >>> Has anybody integrated ofbiz with LDAP or has plans to do so?
> >>> It  seemed like there was some discussion about a year ago.
> >>> Si
> >

Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Adrian Crum
Chris,

Does your implementation keep the OFBiz password synchronized with Active Directory?


Chris Chesney wrote:

> David,
>
> Yes, you can post the document.  We're still interested in moving
> forward on this at some point - just need to convince the client.  We
> have implemented a slimmed down version that overrides the login
> services to use Active Directory for authentication.
>
> -Chris
>
>
>>-----Original Message-----
>>From: David E Jones [mailto:[hidden email]]
>>Sent: Wednesday, September 06, 2006 5:14 PM
>>To: [hidden email]
>>Subject: Re: ldap?
>>
>>
>>I did some analysis for Integral a while back for possible ways of
>>doing this, mostly on a tool level. If they are okay with it I
>>wouldn't mind posting the resulting document.
>>
>>-David
>>
>>
>>On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>>
>>
>>>but has anything been done?
>>>
>>>On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>>
>>>
>>>>Search the Wiki for "LDAP Integration"
>>>>
>>>>
>>>>Si Chen wrote:
>>>>
>>>>>Hi.
>>>>>Has anybody integrated ofbiz with LDAP or has plans to do so?
>>>>>It  seemed like there was some discussion about a year ago.
>>>>>Si
>>>
>
>
Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Chris Juettner
Not at this time.  The user authenticates using their domain password stored in Active Directory. We skip OFBiz password verification when the application is configured to use AD, but continue to use the OFBiz security for resource authorization.  If the user is logging into the application for the very first time, we do self-provision them by setting them up in the OFBiz database with default groups and roles automatically.
   
  Chris Juettner
  Integral Business Solutions

Adrian Crum <[hidden email]> wrote:
  Chris,

Does your implementation keep the OFBiz password synchronized with Active Directory?


Chris Chesney wrote:

> David,
>
> Yes, you can post the document. We're still interested in moving
> forward on this at some point - just need to convince the client. We
> have implemented a slimmed down version that overrides the login
> services to use Active Directory for authentication.
>
> -Chris
>
>
>>-----Original Message-----
>>From: David E Jones [mailto:[hidden email]]
>>Sent: Wednesday, September 06, 2006 5:14 PM
>>To: [hidden email]
>>Subject: Re: ldap?
>>
>>
>>I did some analysis for Integral a while back for possible ways of
>>doing this, mostly on a tool level. If they are okay with it I
>>wouldn't mind posting the resulting document.
>>
>>-David
>>
>>
>>On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>>
>>
>>>but has anything been done?
>>>
>>>On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>>
>>>
>>>>Search the Wiki for "LDAP Integration"
>>>>
>>>>
>>>>Si Chen wrote:
>>>>
>>>>>Hi.
>>>>>Has anybody integrated ofbiz with LDAP or has plans to do so?
>>>>>It seemed like there was some discussion about a year ago.
>>>>>Si
>>>
>
>

Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Adrian Crum
That's what I wanted to accomplish when I first approached the subject. When the
idea hit the mailing list, it ballooned into building an LDAP component into
OFBiz, which made it too complicated for me to implement.

Having our users authenticate to our LDAP server is something I am still
interested in. I would really appreciate any tips!


Chris Juettner wrote:

> Not at this time.  The user authenticates using their domain password stored in Active Directory. We skip OFBiz password verification when the application is configured to use AD, but continue to use the OFBiz security for resource authorization.  If the user is logging into the application for the very first time, we do self-provision them by setting them up in the OFBiz database with default groups and roles automatically.
>    
>   Chris Juettner
>   Integral Business Solutions
>
> Adrian Crum <[hidden email]> wrote:
>   Chris,
>
> Does your implementation keep the OFBiz password synchronized with Active Directory?
>
>
> Chris Chesney wrote:
>
>>David,
>>
>>Yes, you can post the document. We're still interested in moving
>>forward on this at some point - just need to convince the client. We
>>have implemented a slimmed down version that overrides the login
>>services to use Active Directory for authentication.
>>
>>-Chris
>>
>>
>>
>>>-----Original Message-----
>>>From: David E Jones [mailto:[hidden email]]
>>>Sent: Wednesday, September 06, 2006 5:14 PM
>>>To: [hidden email]
>>>Subject: Re: ldap?
>>>
>>>
>>>I did some analysis for Integral a while back for possible ways of
>>>doing this, mostly on a tool level. If they are okay with it I
>>>wouldn't mind posting the resulting document.
>>>
>>>-David
>>>
>>>
>>>On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>>>
>>>
>>>
>>>>but has anything been done?
>>>>
>>>>On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>>>
>>>>
>>>>
>>>>>Search the Wiki for "LDAP Integration"
>>>>>
>>>>>
>>>>>Si Chen wrote:
>>>>>
>>>>>
>>>>>>Hi.
>>>>>>Has anybody integrated ofbiz with LDAP or has plans to do so?
>>>>>>It seemed like there was some discussion about a year ago.
>>>>>>Si
>>>>
>>
>
>
Reply | Threaded
Open this post in threaded view
|

Re: ldap?

David E Jones-2
In reply to this post by Chris Chesney

Anyone Interested,

Okay, I dug up the EE LDAP document that I did for Integral last year  
with the proposal for this integration. Because of the difference  
between a relational and hierarchical data source the mapping is a  
little messy, but this is one way we could do a fairly generic data-
level integration.

With these fancy new lists attachments don't usually go through, so  
I'm posting it to the docs site wiki here:

http://docs.ofbiz.org/x/uAE

-David



On Sep 8, 2006, at 8:15 AM, Chris Chesney wrote:

> David,
>
> Yes, you can post the document.  We're still interested in moving
> forward on this at some point - just need to convince the client.  We
> have implemented a slimmed down version that overrides the login
> services to use Active Directory for authentication.
>
> -Chris
>
>> -----Original Message-----
>> From: David E Jones [mailto:[hidden email]]
>> Sent: Wednesday, September 06, 2006 5:14 PM
>> To: [hidden email]
>> Subject: Re: ldap?
>>
>>
>> I did some analysis for Integral a while back for possible ways of
>> doing this, mostly on a tool level. If they are okay with it I
>> wouldn't mind posting the resulting document.
>>
>> -David
>>
>>
>> On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>>
>>> but has anything been done?
>>>
>>> On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>>
>>>> Search the Wiki for "LDAP Integration"
>>>>
>>>>
>>>> Si Chen wrote:
>>>>> Hi.
>>>>> Has anybody integrated ofbiz with LDAP or has plans to do so?
>>>>> It  seemed like there was some discussion about a year ago.
>>>>> Si
>>>
>

Reply | Threaded
Open this post in threaded view
|

Re: ldap?

Adrian Crum
Thanks David!

Would it be okay if I attached the document to the Wiki LDAP Integration page?


David E Jones wrote:

>
> Anyone Interested,
>
> Okay, I dug up the EE LDAP document that I did for Integral last year  
> with the proposal for this integration. Because of the difference  
> between a relational and hierarchical data source the mapping is a  
> little messy, but this is one way we could do a fairly generic data-
> level integration.
>
> With these fancy new lists attachments don't usually go through, so  I'm
> posting it to the docs site wiki here:
>
> http://docs.ofbiz.org/x/uAE
>
> -David
>
>
>
> On Sep 8, 2006, at 8:15 AM, Chris Chesney wrote:
>
>> David,
>>
>> Yes, you can post the document.  We're still interested in moving
>> forward on this at some point - just need to convince the client.  We
>> have implemented a slimmed down version that overrides the login
>> services to use Active Directory for authentication.
>>
>> -Chris
>>
>>> -----Original Message-----
>>> From: David E Jones [mailto:[hidden email]]
>>> Sent: Wednesday, September 06, 2006 5:14 PM
>>> To: [hidden email]
>>> Subject: Re: ldap?
>>>
>>>
>>> I did some analysis for Integral a while back for possible ways of
>>> doing this, mostly on a tool level. If they are okay with it I
>>> wouldn't mind posting the resulting document.
>>>
>>> -David
>>>
>>>
>>> On Sep 6, 2006, at 4:08 PM, Si Chen wrote:
>>>
>>>> but has anything been done?
>>>>
>>>> On Sep 6, 2006, at 2:59 PM, Adrian Crum wrote:
>>>>
>>>>> Search the Wiki for "LDAP Integration"
>>>>>
>>>>>
>>>>> Si Chen wrote:
>>>>>
>>>>>> Hi.
>>>>>> Has anybody integrated ofbiz with LDAP or has plans to do so?
>>>>>> It  seemed like there was some discussion about a year ago.
>>>>>> Si
>>>>
>>>>
>>
>
>