<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
On 14/12/2010 14:17, <a class="moz-txt-link-abbreviated" href="mailto:patrick.gaikowski@kaufland.com">patrick.gaikowski@kaufland.com</a> wrote:
<blockquote
cite="mid:OFF920FDAF.72842136-ONC12577F9.004D48CF-C12577F9.004E80B4@de.int.kaufland"
type="cite">
<p>Hello Jules,<br>
<br>
thank you for you fast response.<br>
<br>
I tested the new configuration settings, but there seem to be
some additional changes needed:<br>
<br>
<b>What did i made:</b><br>
</p>
<ul type="disc">
<li>added <font color="#ff0000">"ErrorUnauthorizedUser =
"Sorry, you are not authorized to use this service""</font>
to <font color="#0000ff">/opt/zendto/config/zendto.conf</font>
</li>
<li>changed <font color="#0000ff">/opt/zendto/config/preferences.php</font></li>
</ul>
</blockquote>
That's all in the README.txt instructions I included in the zip
file, as mentioned in my previous email.<br>
<blockquote
cite="mid:OFF920FDAF.72842136-ONC12577F9.004D48CF-C12577F9.004E80B4@de.int.kaufland"
type="cite">
<ul type="disc">
<li> <br>
</li>
</ul>
<br>
//<br>
// Settings for the LDAP authenticator.<br>
//<br>
'authenticator' => 'LDAP',<br>
'authLDAPAdmins' => array('xxxxxx','xxxxxx'),<br>
'authLDAPBaseDN' => 'o=kl',<br>
// 'authLDAPServers' => array('ldap2.kaufland'),<br>
'authLDAPServers' => array('x.x.1.118','x.xx.1.117'),<br>
// 'authLDAPAccountSuffix' => '@ecs.soton.ac.uk',<br>
'authLDAPUseSSL' => false,<br>
// 'authLDAPBindDn' => 'o=MyOrganization,uid=MyUser',<br>
// 'authLDAPBindPass' => 'SecretPassword',<br>
// This is the list of LDAP properties used to build the user's
full name<br>
'authLDAPFullName' => 'givenName sn',<br>
'authLDAPMemberKey' => 'groupMembership',<br>
'authLDAPMemberRole' =>
'cn=citrix,ou=portal,ou=sslvpn,ou=roles,o=kl',<br>
<ul type="disc">
<li>Changed <font color="#0000ff">NSSLDAPAuthenticator.php</font>
to the new one</li>
</ul>
</blockquote>
That's all in the README.txt file I included.<br>
<blockquote
cite="mid:OFF920FDAF.72842136-ONC12577F9.004D48CF-C12577F9.004E80B4@de.int.kaufland"
type="cite">
<br>
If the groupMembership exists, i can login successfully. If i
changed something on the string for <font color="#ff0000">authLDAPMemberRole</font>
so that the role does not match, i got PHP-Error message "<b><font
size="4">Fatal error</font></b><font size="4">: Call to a
member function getConfigVariable() on a non-object in </font><b><font
size="4">/opt/zendto/lib/NSSLDAPAuthenticator.php</font></b><font
size="4"> on line </font><b><font size="4">299</font></b><font
size="4">" </font><br>
<br>
<b>Content of line 299 -->
NSSError($smarty->getConfigVariable('ErrorUnauthorizedUser'),'Authorisation
Failed');</b><br>
</blockquote>
As I said, I haven't been able to test the LDAP version of the code
as I don't have a normal LDAP server to use. However, I have found
the bug. Just add a line saying<br>
global $smarty;<br>
at the start of that function (around line 237), and that error
message will disappear.<br>
<br>
Then I think you should find it all works! :-)<br>
<br>
Best regards,<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CITP CEng
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM
</pre>
</body>
</html>