Ldap - Active Directory - Windows Server 2012 R2 - Work Fine Topic is solved

[andreasoc]

I want to leave an feedback for others users to facilitate integration of Joomla 3.9 with Ldap Integration for login with the same username e password of your Windows PC.

I have Windows Server 2012 R2 with Active Directory and after lots of research and tests I found the solution!
This is my plugin ldap configuration:

Host: IP OR SERVER NAME
Port: 389
LDAP V3: Yes
Negotiate TLS: No
Follow Referrals: No
Authorisation Method: Bind and Search (THIS IS IMPORTANT..I USE BIND DIRECTLY AND USED.. AND i only worked the admin account)
Base DN: DC=mydomain,DC=com (all users of your AD work it)
Search String: sAMAccountName=[search]
User's DN:
Connect Username: cn=joomlatest,cn=Users,dc=mydomain,dc=com
Password: ***********
Map: displayName
Map: mail
Map: sAMAccountName

after that go to Global configuration --> Permissions
and set PUBLIC --> (Action) Site Login --> Allowed.

I hope to help someone.

[andreasoc]

ps. the official documentation about this is old and little detailed, so I hope to have given you help

[geekonthepc]

I just signed up to this forum to thank you for this post! I've spent the last 2 days trying various configs to get it right and finally I've got a working connection.

Cheers!

[andreasoc]

I just signed up to this forum to thank you for this post! I've spent the last 2 days trying various configs to get it right and finally I've got a working connection.

Cheers!

i'm happy for this!
this is the COmmunity

[ray2940]

I just came across this post. Was very helpful and works for my active directory administrator account but now other accounts. There's no onscreen error. It just doesn't login.

Any ideas what the problem could be?
Is there a debug log somewhere?
I look in the apache error log but there is no errors there.

[Per Yngve Berg]

A requirement is that the LDAP plugin returns all required fields for Joomla to create a user.

[ray2940]

So how do you confirm or ensure that is happening?
I don't see anything in the logs and there is no error on the screen.

[Per Yngve Berg]

Is "User name", "Full Name" and "Email" mapped to a LDAP field?

PS. This topic is marked as solved, so you wan't get mutch attention here. Alwayas make your own new topic.