Community Forums

1. 

   PleaseHelp
   Member
   Posted 10 years ago

   is LDAP authentication supported by mediadrop?
   i have installed this great product but cannot find any other authentication methods.

   would love to test this in a school!

   Thankyou for your time
2. 

   snowdena
   Member
   Posted 10 years ago

   I have Mediadrop installed on an Ubuntu server and use Apache/wsgi

   I have LDAP authentication to AD on a Windows Server.

   Although this does not create user accounts on Mediadrop, it does allow me to restrict access to my AD users only.
3. 

   am262327
   Member
   Posted 10 years ago

   Mediadrop doesn't have LDAP built-in but the framework and plugins should allow any developer to do that. I actually wrote a hard-coded version of it for my own site, and since it's hard-coded not good enough to share, but it's definitely possible. Maybe just hire a programmer to get it, who hopefully can publish it.
4. 

   am262327
   Member
   Posted 10 years ago

   In case anyone is wondering how I got it authenticating to an external database, the main code is here:
   https://github.com/brainysmurf/mediacore-community/blob/SSIS-DRAGONTV/mediadrop/model/auth.py

   Warning: It's not portable, so copy-n-paste won't work. But at least I give you the idea in case you want to adopt this particular use. Much better though would be a plugin...

   First, I rewrote the User validate_password method in the model so that it tries to authenticate with the internal database first, failing that "if not authenticated" then sets up some the query to the database (I really ought to move that to the config!) then I see if the hash of the password matches what's in the database (line 178), and if I am, then I try to find the user by username in the mediadrop database. If I can't find the user, then I make a new one, the "RestrictedGroup" business again is specific to my site, what's it's doing is determine which group to put it in. Looking at the email address of the user, we can know what group to put them in (again, specific to my own setup).

   So, basically if we can't authenticate to the mediadrop database, then we try and authenticate elsewhere, and if it's the first time, the user will be created, but then after that the code picks up that user that was created.

   You have to return a boolean of whether or not authentication succeeded, Mediadrop does the rest after that.

RSS feed for this topic

Reply

You must log in to post.