| 1 | = Drupal Module LDAP |
| 2 | |
| 3 | Tags: [[Drupal]] [[LDAP]] |
| 4 | |
| 5 | == Edit Configuration |
| 6 | |
| 7 | Drupal > Modules > LDAP Servers > Configuration |
| 8 | |
| 9 | === Server Configuration |
| 10 | |
| 11 | Machine Name:: uhl_ad |
| 12 | Name:: UHL AD connection |
| 13 | Enables:: ticked |
| 14 | LDAP Server Type:: Active Directory |
| 15 | LDAP Server:: ldaplookups.xuhl-tr.nhs.uk |
| 16 | LDAP Port:: 389 |
| 17 | Use Start-TLS:: False |
| 18 | Binding Method:: Service Account Bind |
| 19 | Service Account Binding Credentials:: Briccs.LDAP |
| 20 | Base DNS:: {{{DC=xuhl-tr,DC=nhs,DC=uk}}} |
| 21 | AuthName Attribute:: sAMAccountName |
| 22 | Email Attribute:: mail |
| 23 | Allow Account Conflicts:: false |
| 24 | Testing Drupal User:: nholden [[ToDo]] |
| 25 | |
| 26 | All other fields are blank. |
| 27 | |
| 28 | === Authentication Settings |
| 29 | |
| 30 | Allowable Authentication:: Only LDAP |
| 31 | Authentication LDAP Server:: ''Tick above server'' |
| 32 | Username Description Text:: Enter your usual UHL login |
| 33 | Password Description Text:: Enter your usual UHL login |
| 34 | LDAP User "WHITELIST" and Restrictions:: |
| 35 | {{{ |
| 36 | OU=Cardiology |
| 37 | OU=LNR Comprehensive Research Network |
| 38 | }}} |
| 39 | Existing Drupal User Account Conflict:: Associate... |
| 40 | Account Creation for LDAP Authenticated Users:: Create Accounts Automatically |
| 41 | Email Behaviour:: Show Disabled Email Field |
| 42 | Email Update:: Update stored email but don't notify |
| 43 | |
| 44 | All other fields are blank. |
| 45 | |
| 46 | === Authorization |
| 47 | |
| 48 | LDAP Server:: ''Tick above server'' |
| 49 | Enable this configuration:: Tick |
| 50 | Only apply the following LDAP:: Tick |
| 51 | Strategy II.B:: Chosen |
| 52 | Drupal Roles are Specified by LDAP Attributes:: Tick |
| 53 | Attribute Name:: memberOf |
| 54 | III LDAP Drupal Role Mapping - Mapping:: {{{CN=LCBRU-live,OU=CiviCRM,OU=Apps,DC=xuhl-tr,DC=nhs,DC=uk|LCBRU staff}}} |
| 55 | Use LDAP group to drupal roles filtering:: Tick |
| 56 | IVC What actions would you like performed when drupal roles are granted/revoked:: Create Drupal roles if they do not exist |
| 57 | |
| 58 | All other fields are blank |
| 59 | |
| 60 | == Testing |
| 61 | |
| 62 | - Drupal > Modules > LDAP Servers > Configuration > Servers |
| 63 | - Click with the {{{Test}}} button against the server. |
| 64 | - ENTER The user's UHL username and click the {{{Test}}} button. |
| 65 | - Details of the user's AD groups and all other LDAP details are then displayed. |
| 66 | |
| 67 | [[BackLinks]] |