Curtiss Grymala

<p>This plugin allows WordPress to authenticate, authorize, create and update against an Active Directory domain. This plugin is based heavily on the <a href="https://wordpress.org/extend/plugins/active-directory-integration/" rel="ugc">Active Directory Integration</a> plugin, but has been modified to work with Multi Site and even Multi Network installations of WordPress.</p>
<p>Some of the features included in this plugin are:</p>
<ul>
<li>authenticate against more than one AD Server (for balanced load)</li>
<li>authorize users by Active Directory group memberships</li>
<li>auto create and update users that can authenticate against AD<br />
mapping of AD groups to WordPress roles</li>
<li>use TLS (or LDAPS) for secure communication to AD Servers (recommended)</li>
<li>use non standard port for communication to AD Servers</li>
<li>protection against brute force attacks</li>
<li>user and/or admin e-mail notification on failed login attempts</li>
<li>determine WP display name from AD attributes (sAMAccountName, displayName, description, SN, CN, givenName or mail)</li>
<li>enable/disable password changes for local (non AD) WP users</li>
<li>WordPress 3.0/3.1 compatibility, including Multi Site and Multi Network</li>
</ul>
<p>This plugin is based on <a href="https://wordpress.org/extend/plugins/active-directory-integration/" rel="ugc">glatze’s Active Directory Integration</a> plugin, which is based upon <a href="https://wordpress.org/extend/plugins/active-directory-authentication/" rel="ugc">Jonathan Marc Bearak’s Active Directory Authentication</a> plugin and <a href="http://adldap.sourceforge.net/" rel="nofollow ugc">Scott Barnett’s adLDAP</a>, a very useful PHP class.</p>
<p>Aside from the changes to make this plugin work more effectively with WordPress Multi Site, this version of the plugin also encrypts the password used to connect to the AD server when it is stored in the database.</p>
<p>This plugin was developed by <a href="https://wordpress.org/extend/plugins/profile/cgrymala" rel="ugc">Curtiss Grymala</a> for the <a href="http://umw.edu/" rel="nofollow ugc">University of Mary Washington</a>. It is licensed under the GPL2, which basically means you can take it, break it and change it any way you want, as long as the original credit and license information remains somewhere in the package.</p>
<h3>Important Notice</h3>
<p>Since I don’t currently have access to multiple AD servers, this plugin has only been tested on a single installation of WordPress with a single AD server. Therefore, it is entirely possible that there are major bugs.</p>
<p>At this time, I am seeking people to test the plugin, so please report any issues you encounter.</p>
<h3>Requirements</h3>
<ul>
<li>
<p>This plugin requires WordPress. It might work with versions older than 3.0, but it has not been tested with those.</p>
</li>
<li>
<p>This plugin also requires PHP5. Some attempt has been made to make it compatible with PHP4, but it has not been tested in that environment.</p>
</li>
<li>
<p>This plugin requires LDAP support to be compiled into PHP. If the <code>ldap_connect()</code> function is not available, this plugin will output an error message and will not do anything.</p>
</li>
</ul>
<h3>To Do</h3>
<ul>
<li>Add ability to validate against multiple AD servers (check one, then the other – rather than just load-balancing as the plugin currently does)</li>
<li>DONE as of 0.4a – Update admin interface to utilize native meta box interface rather than custom layout</li>
<li>DONE as of 0.3a – Separate the profile information from the role equivalent groups in the “auto update user” setting</li>
</ul>


Active Directory Authentication Integration

Allows WordPress to authenticate, authorize, create and update users through Active Directory

Clifton Griffin

<p>Having a single login for every service is a must in large organizations. This plugin allows you to integrate WordPress with LDAP quickly and easily. Like, really really easy.</p>
<p><strong>Contributing</strong><br />
This is a community project now. Most development is done by users like you who find bugs and fix them, or find new ways to make the plugin more powerful for everyone.</p>
<p>The easiest way to contribute to this plugin is to submit a GitHub pull request. Here’s the repo:<br />
https://github.com/clifgriffin/simple-ldap-login</p>
<p><strong>Support</strong></p>
<p>If you need support, file an issue here:<br />
https://github.com/clifgriffin/simple-ldap-login/issues</p>
<p><strong>Special Requests</strong></p>
<p>If you need a customization or change specific to your install, I am available for hire. Shoot me an e-mail: clifgriffin[at]gmail.com</p>
<h4>Features</h4>
<ul>
<li>Supports Active Directory and OpenLDAP (and other directory systems which comply to the LDAP standard, such as OpenDS)</li>
<li>Supports TLS</li>
<li>Uses up-to-date methods for WordPress authentication routines.</li>
<li>Authenticates existing WordPress usernames against LDAP.</li>
<li>Can be configured to automatically create WordPress users for valid LDAP logins.</li>
<li>You can restrict logins based on one or more LDAP groups.</li>
<li>Intuitive control panel.</li>
</ul>
<h4>Architecture</h4>
<p>Simple LDAP Login adds an authentication filter to WordPress that authentication requests must pass. In doing so, it makes several decisions.</p>
<ul>
<li>Can the provided credentials be authenticated against LDAP?</li>
<li>
<ul>
<li>If so, is the LDAP user a member of the required LDAP groups (if any)?</li>
</ul>
</li>
<li>
<ul>
<li>
<ul>
<li>Does a matching WordPress user exist?</li>
</ul>
</li>
</ul>
</li>
<li>
<ul>
<li>
<ul>
<li>
<ul>
<li>If so, log the user in.</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
<li>
<ul>
<li>
<ul>
<li>
<ul>
<li>If not, is user creation enabled?</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
<li>
<ul>
<li>
<ul>
<li>
<ul>
<li>
<ul>
<li>Create the user and log them in.</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<p>This is high level overview. This should answer the philosophical questions about how the plugin works. If the plugin is unable to authenticate the user, it should pass it down the chain to WordPress. (Unless LDAP Exclusive is turned on, in which case it won’t.)</p>


Simple LDAP Login

Integrating WordPress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides all of the features, none of the hassles.

Active Directory Authentication Integration vs Simple LDAP Login