Project

General

Profile

Feature #753

Updated by Daniel Curtis about 8 years ago

This is a guide on how to setup LDAP authentication for users on Redmine. The LDAP server is OpenLDAP on FreeBSD 9, but should work on any LDAP server. 

 h2. Populate the LDAP Server 

 * Create the People Organizational Unit ldif file: 
 <pre> 
 vi ~/people-ou.ldif 
 </pre> 
 #* And add the following: 
 <pre> 
 dn: ou=People,dc=example,dc=com 
 objectclass: organizationalUnit 
 ou: People 
 </pre> 

 * Import the People OU file into the server: 
 <pre> 
 ldapadd -D "cn=Manager,dc=example,dc=com" -W -f ~/people-ou.ldif 
 </pre> 

 * Create the bob user ldif file: 
 <pre> 
 vi ~/bob.ldif 
 </pre> 
 #* And add the following: 
 <pre> 
 dn: cn=Bob Guy,ou=People,dc=example,dc=com Guy,ou=People,dc=gnetsolutions,dc=net 
 cn: Bob Guy 
 givenname: Bob 
 initials: BG 
 mail: bob@example.com 
 objectclass: inetOrgPerson 
 objectclass: organizationalPerson 
 objectclass: person 
 sn: Guy 
 uid: bob 
 userpassword: {MD5}X03MO1qnZdYdgyfeuILPmQ== 
 </pre> 
 #* *NOTE*: The password for bob is *password*. 

 h2. Setup LDAP Authentication 

 * Log into redmine admin site, http://redmine.example.com/admin and go to *LDAP Authentication*. 

 * Click on *New authentication mode* and enter the LDAP server details: 
 *# Name: *LDAP Auth* 
 *# Host: *ldap.example.com* 
 *# Port: *389* 
 *# Account: *cn=Manager,dc=example,dc=com* 
 *# Password: *SuperSecretPassword* 
 *# Base DN: *ou=People,dc=example,dc=com* 
 *# On-the-fly user creation: *[X]* 
 *# Login attribute: *uid* 
 *# Firstname attribute: *givenName* 
 *# Lastname attribute: *sn* 
 *# Email attribute: *mail* 

 * Click *Save* 

 * Next go to +Administration -> Users+ and click *New user*. 
 *# Login: *bob* 
 *# First name: *Bob* 
 *# Last name: *Guy* 
 *# Email: *bob@example.com* 
 *# Authentication mode: *LDAP Auth* 

 * Click *Save* 

 Now bob can log in using the the password stored in the LDAP server, in this case its *password*. 

 h2. Resources 

 * http://www.redmine.org/projects/redmine/wiki/RedmineLDAP 
 * http://wiki.univention.com/index.php?title=Cool_Solution_-_Install_Redmine_and_setup_ldap_authentication

Back