= Drupal Module LDAP

Tags: [[Drupal]] [[LDAP]]

== Edit Configuration

Drupal > Modules > LDAP Servers > Configuration

=== Server Configuration

 Machine Name:: uhl_ad
 Name:: UHL AD connection
 Enables:: ticked
 LDAP Server Type:: Active Directory
 LDAP Server:: ldaplookups.xuhl-tr.nhs.uk
 LDAP Port:: 389
 Use Start-TLS:: False
 Binding Method:: Service Account Bind
 Service Account Binding Credentials:: Briccs.LDAP
 Base DNS:: {{{DC=xuhl-tr,DC=nhs,DC=uk}}}
 AuthName Attribute:: sAMAccountName
 Email Attribute:: mail
 Allow Account Conflicts:: false
 Testing Drupal User:: nholden  [[ToDo]]

All other fields are blank.

=== Authentication Settings

 Allowable Authentication:: Only LDAP
 Authentication LDAP Server:: ''Tick above server''
 Username Description Text:: Enter your usual UHL login
 Password Description Text:: Enter your usual UHL login
 LDAP User "WHITELIST" and Restrictions::
{{{
OU=Cardiology
OU=LNR Comprehensive Research Network
}}}
 Existing Drupal User Account Conflict:: Associate...
 Account Creation for LDAP Authenticated Users:: Create Accounts Automatically
 Email Behaviour:: Show Disabled Email Field
 Email Update:: Update stored email but don't notify

All other fields are blank.

=== Authorization

 LDAP Server:: ''Tick above server''
 Enable this configuration:: Tick
 Only apply the following LDAP:: Tick
 Strategy II.B:: Chosen
 Drupal Roles are Specified by LDAP Attributes:: Tick
 Attribute Name:: memberOf
 III LDAP Drupal Role Mapping - Mapping:: {{{CN=LCBRU-live,OU=CiviCRM,OU=Apps,DC=xuhl-tr,DC=nhs,DC=uk|LCBRU staff}}}
 Use LDAP group to drupal roles filtering:: Tick
 IVC What actions would you like performed when drupal roles are granted/revoked:: Create Drupal roles if they do not exist

All other fields are blank

== Testing

- Drupal > Modules > LDAP Servers > Configuration > Servers
- Click with the {{{Test}}} button against the server.
- ENTER The user's UHL username and click the {{{Test}}} button.
- Details of the user's AD groups and all other LDAP details are then displayed.
- The "WHITELIST" string should appear in the {{{distinguishedname}}} field.

[[BackLinks]]