Meitar

<p>This plugin turns your WordPress Dashboard into a familiar management interface for an enterprise-scale LDAP Directory Information Tree (DIT). Configure a connection to your LDAPv3 directory server, and from then on any modifications you make to your WordPress user database through the WordPress admin screens will be reflected in your LDAP database. This offers a simpler and more convenient front-end for managing user account information to support single sign-on (SSO), identity management, and other enterprise functions.</p>
<p><em>Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=TJLPJYXHSRBEE&lc=US&item_name=WP-LDAP&item_number=WP-LDAP&currency_code=USD&bn=PP%2dDonationsBF%3abtn_donate_SM%2egif%3aNonHosted" rel="nofollow ugc">making a donation</a>. 🙂 Thank you for your support!</em></p>
<p>All user accounts on the WordPress side are mirrored as <a href="https://www.ietf.org/rfc/rfc2798.txt" rel="nofollow ugc"><code>inetOrgPerson</code> (RFC 2798)</a> entries on the LDAP side. The following WordPress user account fields to LDAP attribute translations take place when a new WordPress user is created:</p>
<ul>
<li>The WordPress <code>user_login</code> field becomes the <code>uid</code> attribute in the LDAP database.</li>
<li>The WordPress <code>user_email</code> field becomes the <code>mail</code> attribute in the LDAP database.</li>
<li>The WordPress <code>display_name</code> field becomes the <code>displayName</code> attribute in the LDAP database.</li>
<li>The WordPress <code>user_pass</code> field becomes the <code>userPassword</code> attribute in the LDAP database.</li>
</ul>
<p>There is no mapping for the WordPress user ID number on the LDAP side. Instead, users are uniquely identified by their fully-qualified Distinguished Name (DN). A user’s DN is automatically composed by combining their WordPress <code>user_login</code> with the WordPress Multisite’s configured LDAP Search Base setting. For instance, by default, a WordPress Multisite with WP-LDAP installed running at <code>https://example.com/</code> with a user whose username is <code>exampleuser</code> will automatically be mirrored over LDAP to the user identified as <code>uid=exampleuser,dc=example,dc=com</code>.</p>
<p>In addition to the above mappings, the following optional mappings also take place if or when the user updates their user profile:</p>
<ul>
<li>The WordPress <code>first_name</code> field becomes the <code>givenName</code> attribute in the LDAP database.</li>
<li>The WordPress <code>last_name</code> field becomes the <code>sn</code> attribute in the LDAP database.</li>
<li>The WordPress <code>nickname</code> field becomes the <code>cn</code> attribute in the LDAP database.</li>
<li>The WordPress <code>description</code> field becomes the <code>description</code> attribute in the LDAP database.</li>
<li>The WordPress <code>user_url</code> field becomes the <code>labeledURI</code> attribute in the LDAP database.</li>
<li>The WordPress user’s avatar becomes the <code>jpegPhoto</code> attribute in the LDAP database. (Not yet implemented.)</li>
</ul>
<p>Moreover, WP-LDAP is aware of certain features provided by other plugins. These include:</p>
<ul>
<li>The WordPress user’s S/MIME certificate (<code>smime_certificate</code> field) becomes the <code>userSMIMECertificate</code> attribute in the LDAP database. (This functionality is provided by the <a href="https://wordpress.org/plugins/wp-pgp-encrypted-emails/" rel="ugc">WP PGP Encrypted Emails</a> plugin and that plugin must be installed and activated for this to work.)</li>
</ul>
<p>This plugin is designed for medium to large deployments of WordPress Multisite (or Multi-Network) instances, originally developed as a collaboration with the <a href="https://glocal.coop/activist-network-platform/" rel="nofollow ugc">Glocal Coop’s Activist Network Platform</a> project. If you run multiple WordPress Multisite Networks, you can configure each WP Network with different LDAP settings. This plugin does not currently support single-site installs; please <a href="https://github.com/meitar/wp-ldap/issues" rel="nofollow ugc">post an issue on GitHub</a> if you want to use LDAP data stores with a WP single-site install and we can discuss use cases.<br />
This plugin is free software, but grocery stores do not offer free food. <em>Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=TJLPJYXHSRBEE&lc=US&item_name=WP-LDAP&item_number=WP-LDAP&currency_code=USD&bn=PP%2dDonationsBF%3abtn_donate_SM%2egif%3aNonHosted" rel="nofollow ugc">making a donation</a>. 🙂 Thank you for your support!</em></p>


WP-LDAP

Translates the WordPress user database to an LDAP store of the same; manage your LDAP DIT using your WordPress Dashboard.

apokalyptik

Stephane Daury (stephdau)

Paul Gilzow

<p>Please see the Changelog (Development tab above) for recent updates/changes.</p>
<p>wpDirAuth shifts authentication from the local WordPress instance to a central directory (LDAP) server(s).</p>
<p>wpDirAuth allows users of central directory (LDAP) servers to login to authorized WordPress instances without having to register. The plugin creates a new account for each directory user on first login so that they have full access to preferences and functions, as any WP user would. Activating the plugin will not restrict you to using directory authentication and you will still be able to both create new WP-only users as well as turn on public registration in WordPress. You can also assign any privilege levels to your directory users, and the those users will be referred to their institutional password policy whenever they would normally able to update their WP passwords (on the profile screen, in user edit, etc).</p>
<h4>LDAP/LDAPS</h4>
<p>Authentication should work with most LDAP enabled directory services, such as OpenLDAP, Apache Directory, Microsoft Active Directory, Novell eDirectory, Sun Java System Directory Server, and more. wpDirAuth supports LDAP and LDAPS (SSL) connectivity and can force SSL for WordPress authentication if it is available on the Web server. It also supports server connection pools, for pseudo load balancing and fault tolerance, or multiple source directory authentication. Because the key used to locate a user’s profile in the LDAP server is not always the same, depending on your LDAP server type and institutional choices, you can define your own through the wpDirAuth administration tool. When logging in as a directory user, the WP “remember me” feature is downgraded from 6 months for regular WP users to only 1 hour, so that institutional passwords are not overly endangered when accessing WP from public terminals.</p>
<h4>Branding & Notifications</h4>
<p>You can define notifications addressed to your directory users in key WordPress areas, such as the login screen and the profile edit screen. Since these admin-editable values support HTML (admin, coders, beware of xss!), you can point your directory users to central support information related to functions such as changing their institutional password, a WordPress usage related policy, etc. There is also a simple and optional terms of services concept, only implemented for directory users, which will simply record a one-time acceptance date when agreed upon. Note that agreeing to the TOS has no effect on the user’s level of access in the system, fact which could change in future version if there is a demand for it, or through direct code contribution to that effect.</p>
<h3>Using wpDirAuth</h3>
<p>Once installed and activated, you will be able to administer your directory settings through the dedicated plugin configuration tool found under the <code>wpDirAuth</code> menu found in the WordPress <code>Settings</code> admin section. Directory Authenticated users can now be pre-added to your wordpress system and granted roles by going to the <code>Add Dir Auth User</code> menu found in the WordPress <code>Users</code> admin section. Contextual help for this section is available for this section within WordPress’ built-in help menu. See the inline help found in the tool for more information on the settings. There is a secondary activation toggle, so you can install and activate the plugin, check out the options panel, but not immediately accept directory authentication, or even simply turn the feature on or off at any time.</p>
<h3>Help and Support</h3>
<p>Please post questions, request for help to the WordPress plugins forum or email <a href="mailto:wpdirauth@gilzow.com" rel="nofollow ugc">wpdirauth@gilzow.com</a>. Please be sure to include ‘wpdirauth’ in the subject line.</p>
<h3>TO-DO’s</h3>
<ul>
<li>Internationalization</li>
<li>Refactor to a class</li>
<li>More action/filter hooks</li>
</ul>
<h3>Source and Development</h3>
<p>wpDirAuth welcomes friendly contributors wanting to lend a hand, be it in the form of code through SVN patches, user support, platform portability testing, security consulting, localization help, etc. The [current] goal is to keep the plugin self-contained (ie: no 3rd-party lib) for easier security maintenance, while keeping the code clean and extensible. Focus is on security, features, security, and let’s not forget, security. Unit tests will hopefully be developed and constant security audit performed. Recurring quality patch contributions will lead to commit privileges to the project source repository. Please post questions/requests for help to the wordpress forums and/or email <a href="mailto:wpdirauth@gilzow.com" rel="nofollow ugc">wpdirauth@gilzow.com</a></p>
<h3>License</h3>
<p><a href="http://www.gnu.org/licenses/gpl.html" rel="nofollow ugc">General Public License</a><br />
Copyrights are listed in chronological order, by contributions.<br />
wpDirAuth: WordPress Directory Authentication, original author<br />
Copyright (c) 2007 Stephane Daury – http://stephane.daury.org/<br />
wpDirAuth and wpLDAP Patch Contributions<br />
Copyright (c) 2007 PKR Internet, LLC – http://www.pkrinternet.com/</p>
<p>wpDirAuth Patch Contributions<br />
Copyright (c) 2007 Todd Beverly<br />
wpLDAP: WordPress LDAP Authentication<br />
Copyright (c) 2007 Ashay Suresh Manjure – http://ashay.org/<br />
wpDirAuth Patch Contribution and current maintainer<br />
Copyright (c) 2010-2017 Paul Gilzow – http://gilzow.com/<br />
wpDirAuth is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation.<br />
wpDirAuth is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.<br />
You should have received a copy of the GNU General Public License along with this program. If not, see <a href="http://www.gnu.org/licenses/" rel="nofollow ugc">http://www.gnu.org/licenses/</a>.</p>
<h3>Project History</h3>
<p>Originally started from a patched version of wpLDAP (1.02+patch), wpDirAuth has<br />
since then been heavily overhauled and features have been modified and added.<br />
In other words, a classic case of <code>pimp my lib'</code> (hopefully for the better).<br />
* Current: wpDirAuth: <a href="http://wpdirauth.gilzow.com/" rel="nofollow ugc">http://wpdirauth.gilzow.com/</a><br />
* Original: wpLDAP: <a href="https://wordpress.org/plugins/wpldap/" rel="ugc">https://wordpress.org/plugins/wpldap/</a><br />
* wpLDAP Patch: <a href="https://web.archive.org/web/20100731020249/http://www.pkrinternet.com/~rbulling/private/wpLDAP-1.02-ssl.patch" rel="nofollow ugc">https://web.archive.org/web/20100731020249/http://www.pkrinternet.com/~rbulling/private/wpLDAP-1.02-ssl.patch</a></p>


wpDirAuth

Works with multisite, SSL/TLS actually works, and it allows easy customization of the login box to match corporate standards.



Works with multisite

WordPress directory authentication plugin through LDAP and LDAPS (SSL).

WP-LDAP vs wpDirAuth