GNet Solutions » GNU/Linux Administration

This is a guide on how to setup LDAP authentication for users on Piwik. The LDAP server is OpenLDAP on FreeBSD 9, but should work on any LDAP server.

Prepare the Environment¶

• Make sure php56-ldap is installed:
  

  pkg install php56-ldap
  

• And restart php-fpm to load the PHP LDAP extension:
  

  service php-fpm restart
  

Populate the LDAP Server¶

• Create the People Organizational Unit ldif file:
  

  vi ~/people-ou.ldif
  

  • And add the following:
    

    dn: ou=People,dc=example,dc=com
    objectclass: organizationalUnit
    ou: People
    

• Import the People OU file into the server:
  

  ldapadd -D "cn=Manager,dc=example,dc=com" -W -f ~/people-ou.ldif
  

• Create the bob user ldif file:
  

  vi ~/bob.ldif
  

  • And add the following:
    

    dn: cn=Bob Guy,ou=People,dc=example,dc=com
    cn: Bob Guy
    givenname: Bob
    initials: BG
    mail: bob@example.com
    objectclass: inetOrgPerson
    objectclass: organizationalPerson
    objectclass: person
    sn: Guy
    uid: bob
    userpassword: {MD5}X03MO1qnZdYdgyfeuILPmQ==
    

  • NOTE: The password for bob is password.

Setup LDAP Authentication¶

• Open a web browser and log into as the piwik administrator at http://piwik.example.com

• Next click on Administration -> Marketplace.

• Search for LoginLdap and Install the plugin.

• Then click on Administration -> LDAP.

• Scroll down to the LDAP Servers section and enter the LDAP server information:
  • Server URL: ldap.example.com
  • Server Port: 389
  • Base DN: dc=example,dc=com
  • LDAP Bind Username: cn=Manager,dc=example,dc=com
  • LDAP Password: SuperSecretPassword

Resources¶

• https://plugins.piwik.org/LoginLdap
• https://github.com/piwik/plugin-LoginLdap/