Comments on: Ruby on Rails HTTP Basic Auth with LDAP

By: Fred

Fred — Fri, 15 May 2009 02:18:51 +0000

94man:
@point_person = PointPerson.find_by_username(username) is where we get the user to check against. You will want to replace this with your own user model.

By: 94man

94man — Tue, 12 May 2009 15:02:07 +0000

Thank you for share this code…

I’m having the following error:

uninitialized constant ApplicationController::PointPerson

at -> @point_person = PointPerson.find_by_username(username)

What can i do to solve it?

By: Juan

Juan — Mon, 11 May 2009 20:25:29 +0000

Patrick:

Thank you for your reply. I downloaded a little java app JXplorer to try to connect using my credentials, after changing the order of the cn property I was able to connect:

The proper order was:

ldap.auth ‘cn=’ + username + ‘,ou=active,ou=employees,ou=users,o=my_o’, password

Thank you again for the code and the reply. It is a success.

By: Patrick

Patrick — Fri, 01 May 2009 16:08:54 +0000

@Juan A few possibilities:
(1) You have not yet configured any users yet. Some LDAP records may be configured in such a way that only specific users can access the record (instead of binding anonymously). You may need to at least create a “manager” account as described in the OpenLDAP manual.
(2) The authentication mechanism used is incorrect. Say SASL is expected but you have used simple (password-based) authentication.

By: Juan

Juan — Thu, 30 Apr 2009 14:53:17 +0000

Thank you for sharing this. I’m a beginner on Rails, so please understand if this is stupid.

I’m getting a “Invalid Credentials” message. Any idea?

Thanks

By: Patrick

Patrick — Thu, 09 Apr 2009 21:35:31 +0000

Good catch @gary. I’ve updated the code.

By: Fred

Fred — Thu, 09 Apr 2009 19:39:46 +0000

@gary is right just a typo on my code. dohp

By: gary

gary — Sun, 04 Jan 2009 09:31:41 +0000

I’m not very good at this, but it seems your LDAPBASE could be:

LDAPBASE = ‘,ou=active…”

or your ldap.auth should be:

ldap.auth ‘uid=’ + username + ‘,’ +LDAPBASE

Of course, if works for you, maybe I’m wrong, but it seems you would get:

uid=ldap-uidou=active, ou=employee, ou=people, o=host.com

(no comma between ldap-uid and ou=active) with this example.