Project

General

Profile

Actions

Feature #753

closed
DC DC

Setup LDAP Authentication for Redmine

Feature #753: Setup LDAP Authentication for Redmine

Added by Daniel Curtis almost 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication
Target version:
Start date:
02/24/2016
Due date:
% Done:

100%

Estimated time:
1:00 h
Spent time:

Description

This is a guide on how to setup LDAP authentication for users on Redmine. The LDAP server is OpenLDAP on FreeBSD 9, but should work on any LDAP server.

Populate the LDAP Server

  • Create the People Organizational Unit ldif file:
    vi ~/people-ou.ldif
    
    • And add the following:
      dn: ou=People,dc=example,dc=com
      objectclass: organizationalUnit
      ou: People
      
  • Import the People OU file into the server:
    ldapadd -D "cn=Manager,dc=example,dc=com" -W -f ~/people-ou.ldif
    
  • Create the bob user ldif file:
    vi ~/bob.ldif
    
    • And add the following:
      dn: cn=Bob Guy,ou=People,dc=example,dc=com
      cn: Bob Guy
      givenname: Bob
      initials: BG
      mail: bob@example.com
      objectclass: inetOrgPerson
      objectclass: organizationalPerson
      objectclass: person
      sn: Guy
      uid: bob
      userpassword: {MD5}X03MO1qnZdYdgyfeuILPmQ==
      
    • NOTE: The password for bob is password.

Setup LDAP Authentication

  • Click on New authentication mode and enter the LDAP server details:
    1. Name: LDAP Auth
    2. Host: ldap.example.com
    3. Port: 389
    4. Account: cn=Manager,dc=example,dc=com
    5. Password: SuperSecretPassword
    6. Base DN: ou=People,dc=example,dc=com
    7. On-the-fly user creation: [X]
    8. Login attribute: uid
    9. Firstname attribute: givenName
    10. Lastname attribute: sn
    11. Email attribute: mail
  • Click Save
  • Next go to Administration -> Users and click New user.
    1. Login: bob
    2. First name: Bob
    3. Last name: Guy
    4. Email:
    5. Authentication mode: LDAP Auth
  • Click Save

Now bob can log in using the the password stored in the LDAP server, in this case its password.

Resources

DC Updated by Daniel Curtis almost 10 years ago Actions #1

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

DC Updated by Daniel Curtis almost 10 years ago Actions #2

  • Description updated (diff)

DC Updated by Daniel Curtis almost 10 years ago Actions #3

  • Category set to Authentication
  • Status changed from Resolved to Closed
Actions

Also available in: PDF Atom