ByOS Technologies - Re:Tying JACL to LDAP--Customizing help needed

	ByOSTech	Forum Threaded View Help

Welcome, Guest
Please Login or Register. Lost Password?

ByOSTech

General

General Talk

Tying JACL to LDAP--Customizing help needed (1 viewing) (1) Guests

Favoured: 0

TOPIC: Tying JACL to LDAP--Customizing help needed

Forum Tools

#752

supline (User)

Fresh Boarder

Posts: 3

Tying JACL to LDAP--Customizing help needed 2 Years, 10 Months ago

Karma: 0

I have been trying to do the following:
Query LDAP and create an array of a users groups (from the memberOf attribute).
Compare the contents of this array against the JACL access group names.
If there is a matching name add the jaclplus numbers from the group to the users $my->jaclplus for the current session.

I know that this is possible, I am just having major problems putting it all together. Any pointers?

The basic idea is that I would like to be able to control access to content _base_d on which Active Directory group a given user is in. That way I don't have to re-create user groups and if things change on AD they will instantly reflect access in JACL.

-Mark

Report to moderator Logged

Logged

The administrator has disabled public write access.

#755

admin (Admin)

Admin

Posts: 787

Re:Tying JACL to LDAP--Customizing help needed 2 Years, 10 Months ago	Karma: 7
Hi supline, Yes, there are ways to implement view access control even an user with multiple groups. All you have to do is get all "jaclplus numbers" while process login.

Report to moderator Logged

Logged

The administrator has disabled public write access.

#761

supline (User)

Fresh Boarder

Posts: 3

Re:Tying JACL to LDAP--Customizing help needed 2 Years, 10 Months ago	Karma: 0
Can you explain how I would go about updating the $my->jaclplus numbers for the current session?

Report to moderator Logged

Logged

The administrator has disabled public write access.

#765

supline (User)

Fresh Boarder

Posts: 3

Re:Tying JACL to LDAP--Customizing help needed 2 Years, 10 Months ago

Karma: 0

I was able to work this out. Basically I had to modify joomla.php and ldapauthenticator.php. In Joomla.php after the session_update() ~line 784 I called 3 functions (1 gets the users groups from LDAP, the 2nd compares those groups to the JACL aro groups and gets the jaclplus numbers for all matches, and the 3rd combines the current users jaclplus from the #__session table and the values from function 2 and then updates the users session table).

I created these functions in the ldapauthenticator.php file since that seemed to make sense to me at the time.

-Mark

Report to moderator Logged

Logged

The administrator has disabled public write access.

#921

stefka (Visitor)

Re:Tying JACL to LDAP--Customizing help needed 2 Years, 9 Months ago

Hi supline,

I tried something similar for the functionality of multiple groups per user, but without LDAP.

The table jos_core_acl_groups_aro_map contains the users that belong to a group. I added a user to more than one group and then I added all the related "jaclplus numbers" to the session.

This can be done at two files. At the joomla.php and at the index.php. It works fine for me.

Also, I'm at a very basic stage yet but I will try to make some pages in order to add/edit/delete multiple groups for every user. Of course, at the jos_users table, only one group_id will be presented, but if I add the multiple groups at the jos_core_acl_groups_aro_map, then it works fine.

stefka

Report to moderator Logged

Logged

The administrator has disabled public write access.

#3449

adrianlewis (User)

Fresh Boarder

Posts: 1

Re:Tying JACL to LDAP--Customizing help needed 1 Year, 4 Months ago

Karma: 0

Is this kind of functionality at all likely to make it into the 1.5 version? It seems that the Joomla! devs are keen to improve LDAP functionality and interop in 1.5 and I would be a definite Chartered Member if this were integrated.

Unfortunately I'm not a PHP head, more of an LDAP person and so trying to do anything with hacking a what already seems to be a hack is pushing me too far into unfamiliar territory.

If there are no intentions of doing this, I may be interested in paying a developer to do this and handing over code for inclusion in return for some kind of favour(s).

Report to moderator Logged

Logged

The administrator has disabled public write access.

Forum List

General

General Talk