Merge pull request #2432 from fstern/active_directory_auth

Moved option 'auth_ad_dont_check_certificates' to 'auth_ad_check_certificates'
This commit is contained in:
Mike Rostermund
2015-11-16 11:07:14 +01:00
2 changed files with 4 additions and 4 deletions

View File

@@ -108,7 +108,7 @@ Config option: `active_directory`
This is similar to LDAP Authentication. Install __php_ldap__ for CentOS/RHEL or __php5-ldap__ for Debian/Ubuntu.
If you have issues with secure LDAP try setting `$config['auth_ad_dont_check_certificates']` to `1`.
If you have issues with secure LDAP try setting `$config['auth_ad_check_certificates']` to `0`.
##### Require actual membership of the configured groups
@@ -118,7 +118,7 @@ If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authentica
```
$config['auth_ad_url'] = "ldaps://your-domain.controll.er";
$config['auth_ad_dont_check_certificates'] = 1; // or 0
$config['auth_ad_check_certificates'] = 1; // or 0
$config['auth_ad_domain'] = "your-domain.com";
$config['auth_ad_base_dn'] = "dc=your-domain,dc=com";
$config['auth_ad_groups']['admin']['level'] = 10;

View File

@@ -3,8 +3,8 @@
// easier to rewrite for Active Directory than to bash it into existing LDAP implementation
// disable certificate checking before connect if required
if (isset($config['auth_ad_dont_check_certificates']) &&
$config['auth_ad_dont_check_certificates'] > 0) {
if (isset($config['auth_ad_check_certificates']) &&
$config['auth_ad_check_certificates'] == 0) {
putenv('LDAPTLS_REQCERT=never');
};