drupal ldap authentication

[scoutt]

thanks bwisupport, you lead me down the right track. Although it wasn't a version conflict per say. It was a little bit of my server and drupal configuration issues. They both were on version 3 of LDAP. My problem was the fact that drupal wasn't using TLS/SSL. Even though I was telling it to.

For anybody that wants to get drupal working using ldap and edirectory.

1) You have to add the servercert path in /etc/openldap/ldap.conf
I had to add

TLS_REQCERT never
TLS_CACERT /etc/ssl/servercerts/cert.pem

- where the cert.pem was the cert I got from the LDAP server and converted to a pem from a .der. Might have to update URI and BASE in the ldap.conf as well. I have it and it works, so not going to change anything to test. :)

2) in drupal - Home › Administer › Site configuration › LDAP > Authentication, Since drupal's website and documentation doesn't explain things very well, you have to use ldaps://IP instead of plain IP or server address. Then if you have SSL enabled for LDAP you have to use 636 and Do Not check "Use Start-TLS".

3) under Base DN's I added o=domain in the text box
4) I added cn for the User Attribute and mail for the main attribute
5) Then under "DN for non-anonymous search:" I had to use the full path - cn=LDAP User,0=Domain then add the password. "This is if you do not want Anonymous searches."

Of course the rest of the configuration is up to you if you want to map groups and stuff. But this should give you the Authentication to connect to your LDAP server. Hope people find it useful as there is a lot of misleading information out there about getting drupal working with eDirectory from a SLES 10 box.

Thanks guys