en Copyright 2025 Java http://127.0.0.1:8080/history/plugin/pureldap/auth.php#fb75804e73edf4af608854927a231691f3206614 Parse AD bind error messages for more info for the userThis is mainly to tell users when their password expired or needs to bechanged. List of files: /plugin/pureldap/auth.php Thu, 17 Jul 2025 13:50:14 +0000 Andreas Gohr <gohr@cosmocode.de> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#208fe81a1d46425114eb6a90e8eceeed153c5f2d automatic code style fixes List of files: /plugin/pureldap/auth.php Tue, 05 Dec 2023 08:13:56 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#0f498d06932ad0cbbdcc8844b96d4913174c7968 implement password expiry warnings. fixes #4 List of files: /plugin/pureldap/auth.php Thu, 03 Aug 2023 15:48:44 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#08ace392be71b69ddc8b1eda246fad47272b7606 support password changesInternally this also changes the behviour to stay authenticated as theactual user if the user logged in. This is needed to allow self-servicepassword changes.This commit also contains a few cleanups. List of files: /plugin/pureldap/auth.php Wed, 02 Aug 2023 10:08:55 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#49b4734aee448aa81e331b6d0cad7fd8e0888c82 remove basically unused filter converter List of files: /plugin/pureldap/auth.php Wed, 21 Jul 2021 07:41:49 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#5da7f46bfe6a840bb7981d986f2127bd7b9b986e remove commented default methods List of files: /plugin/pureldap/auth.php Wed, 21 Jul 2021 07:39:53 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#22654fdec35cb8c2bc6368625db77310d71208fb disable logout for SSO setups List of files: /plugin/pureldap/auth.php Wed, 21 Jul 2021 07:37:15 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#bf69b89c042d8a8a10fdd1dd78cc14b8f933bfe1 first go at SSOThis basically copies the functionality from authAD List of files: /plugin/pureldap/auth.php Wed, 21 Jul 2021 06:43:26 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#a1128cc0f2573cbe769f582d613c9ccb9fc94dee rework username handlingBackground Info---------------Active Directory has at least three different way how users areidentified:1) sAMAccountName: userThe sAMAccountName is what users usually know as their username. It'swhat they usually log in with on their workstation. It is howeverlacking the actual domain to which to login. Typically it is prefixed bya netbios domain for login. Eg. DOMAIN\userNote: The samaccount name is also limited to 20 characters because oflegacy reasons.2) userPrincipalName: user@domain.somethingThe userPrincipalName contains something that looks like a domain. Butit may be actually different to the Domain managed by the AD. Becauseof... reasons? See https://serverfault.com/a/9281163) bind ID: user@domain.extNow, loggin in (eg. doing a LDAP bind) can use different mechanisms. TheuserPrincipalName works, user@domain (different from the UPN) shouldwork too.DokuWiki requirements:----------------------In DokuWiki we need a unique username, that stays the same on everylogin. (logging in with or without the domain part should identify thesame user).We also need this name to be usable to run additional LDAP queries. Eg.find groups with this user name.We also want users to be able to login without having to type the domainpart.This patch----------So with this patch we use the samaccount name to identify a user. Forlogging in, we add the configured account suffix (aka the domain). Afterthat we only use the domainless user name everywhere.In a future update we may (re)introduce the multidomain support fromauthAD. When we do, this will probably force us to use the suffix partin the usernames to different different domain users (something theauthAD plugin doesn't do which is probably wrong). But for most peoplethe single suffix approach should be fine. List of files: /plugin/pureldap/auth.php Thu, 08 Jul 2021 09:33:55 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#6d90d5c87387cafcb884bda8c1b3c7ab80656146 some cleanup for the options List of files: /plugin/pureldap/auth.php Wed, 07 Jul 2021 08:18:34 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#85916a2d9b048aea4d9fabf17927cd8527c6de9c actually use the bulk retrieval in usermanager List of files: /plugin/pureldap/auth.php Sun, 29 Mar 2020 11:31:35 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#b21740b4f161dc4f7eea5b46986e251641fc409a added bulk data retrieval List of files: /plugin/pureldap/auth.php Sun, 29 Mar 2020 10:59:51 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#5a3b912293b77009ff72b70b480eb77929df5103 added group reading List of files: /plugin/pureldap/auth.php Fri, 27 Mar 2020 13:09:06 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#1078ec268114f0851ebf8a4280d0599a5fccb7d5 first working login with active directory List of files: /plugin/pureldap/auth.php Fri, 27 Mar 2020 11:01:53 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/pureldap/auth.php#79f39653646dbe91196636a4fb016f788f558bf9 wizard generated List of files: /plugin/pureldap/auth.php Thu, 26 Mar 2020 19:26:43 +0000 Andreas Gohr <andi@splitbrain.org>