TOPIC:

Is it possible to have more than one LDAP base in the configuration? We've got our system set up to only allow users in the "Staff" part of our LDAP directory to log in. However, we occasionally have temporary employees who need to use Xerte, and their accounts live in a separate part of LDAP that's at the same level as the Staff container...which means they can't log in.

Is it possible to specify more than one LDAP base for a case like this? Or would it be possible to alter the LDAP authentication to make it possible?

Hi Tom
I seem to recall this was possible a long time ago but the overall codebase has changed many times over the years so I'm not sure this is still valid. Do you have a test server/install where you can test this? If so you'll see that the management area indicates: "You can set up multiple hosts by separating entries in each of these fields with the $$$ string as a delimiter" so you could try that and see if it still works?
HTH
Ron

Hi, Ron.

No luck, looks like. Attempting the $$$-delimited strings makes LDAP authentication not work at all--it just bounces right back to the login screen.

What version are you using?
How many users fall into the category of not being able to login e.g. would it be viable to manage their Xerte accounts manually via the management page?

I believe it's X (3.7) on our live system, and it doesn't occur a lot...but it's often enough that it'd be nice to be able to do it automatically through LDAP.

On a related note, is it possible to do authentication through both LDAP and local/DB accounts?

- More than one ldap base.
Yes you still can achieve this, although you cannot set this up through the management page anymore.
You should be abld to add more ldap setups directly in the ldap table of the xerte database. Also enable develop mode (set $developer to true in config.php) for debug information. It should work, although I tested that a long time ago.

- Ldap and Db at the same time. Yes, sort of. You can switch one a secondary authentication mechanism by copying auth_config.php.dist to auth_config.php, editing the file and setting
When you navigate to Xerte as a user you need to add ?altauth to use the secondary authentication mechanism, i.e.