Authentication using Zend Framework

[marioestrada]

Hi 'm developing an intranet using the Zend Framework, and we are going to implent a SSO with Zimbra Ldap.

I want to use the Zend_Auth_Adapter_Ldap adapter that comes bundled with ZF.

But i wanted to know what are the requirements for authenticating using the Zimbra OpenLdap. I'm trying with these setting but they don't work.

host => "9.9.9.9",
useSsl => "0",
accountDomainName => "somedomain.com",
accountDomainNameShort => "SOMEDOMAIN",
accountCanonicalForm => 4,
baseDn => "DC=somedomain,DC=com"

Can anyone guide me? or have any experience with this?

[uxbod]

Welcome to the forums

This may be of help to you UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI - Zimbra :: Wiki.

[marioestrada]

Thank uxbod for your reply,

It has helped me configuring the options to connect to the server, however I was wondering if I need to install everything specified in it just to authenticate users based on their email accounts.

I'm currently trying to authenticate only using the Zimbra OpenLdap and I am getting the following error:

2008-11-04T12:44:48-05:00 DEBUG (7): Ldap: 1: host=9.0.1.2,useSsl=0,username=CN=config,password= *****,bindRequiresDn=true,baseDn=DC=domain,DC=com, accountDomainName=domain.com,accountDomainNameShor t=DOMAIN,accountCanonicalForm=4
2008-11-04T12:44:48-05:00 DEBUG (7): Ldap: 2: jsmith@domain.com authentication failed: 0x20: No such object: (&(objectClass=posixAccount)(uid=jsmith))
2008-11-04T12:44:48-05:00 DEBUG (7):

Update: Zimbra is running on a linux CentOs 5 server.

[marioestrada]

i think i solved it:

I had the option to change the 'accountFilterFormat' that defaulted to: '(&(objectClass=posixAccount)(uid=%s))'
and changed it to: '(&(uid=%s))'

This seemed to do the trick.