frankkoenen

This plugin will enable WP authentication and role management from LDAP server. 
Users who log in to your WP site are authenticated by first matching the 
username input against an attribute to local the RDN. Then a bind is performed 
against the RDN. Upon successful bind, authentication is approved. Local WP 
user management is engaged by initializing and maintaining user DB records.
Simply create your users in your LDAP directly. Define access rights or “roles” 
to specific WP sites. When the user logs into the WP site, the local DB user 
entry is created.
Use LDAP to define users in one place for access to one or many WP sites.
User passwords in the local DB are replaced with jumbled text and are unusable. 
All password information is maintained in LDAP.
User information ( Display Name, Nick Name, Nice Name, First Name, Last Name ) 
are maintained in master form in LDAP and stored and updated (synced) to the 
local DB when the user logs in.
<h3>Features</h3>
<ul>
<li>Supports OpenLDAP</li>
<li>Supports TLS</li>
<li>syslog debugging</li>
<li>Centralized roles management.</li>
<li>Password expirary management.</li>
<li>Password reset management in user profile.</li>
<li>Works with WP Multi-Site setup.</li>
</ul>
<h3>Architecture</h3>
Simple LDAP adds an authentication filter to WordPress that authentication requests must pass. 
Consults LDAP for current role configuration.

Plugin Name: ldap_login_password_and_role_manager

Enables LDAP for user authentication, password management and role management.

sojweb

THIS IS FOR DEVELOPMENT PURPOSES, NOT FOR USE ON PRODUCTION SITES
This plugin is meant to be a reference; I’ve talked to several people who have similar setups, and thought it would beneficial to share some code.
This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP. Default user roles can be assigned based on LDAP group membership, and accounts can be auto-created for users that exist in LDAP, but not yet in WordPress.
It assumes that, for CAS authentication, the user is redirected to an outside address, then back to the referring address; that’s how it works where I’m at :-). You can also specify a group in LDAP that will always have admin privileges; useful for tech staff.
Before the plugin is used, the constants in <code>soj-ldap_constants.inc.php</code> must be filled out. The CAS default password is the one the user is registered with in WordPress; so all WP users will have this password. Be aware of that. There is obviously more that could be done there, and I’m happy to work with others who have ideas.
I’ve adapted this from an in-house plugin I made, so there might be leftover code bits or things that look strange… feel free to harass me about that, I did this in a bit of a rush.
I’ve only ever used this plugin on one environment, so it might not work out-of-the-box for you. I’m interested in making this plugin more robust, however, so please let me know of any issues.
Contact me: jj56@indiana.edu

SoJ CAS/LDAP Login

This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP.

Plugin Name: ldap_login_password_and_role_manager vs SoJ CAS/LDAP Login