Using LemonLDAP::NG with Active-Directory

Authentication with login/password

To use Active Directory as LDAP backend, you must change few things in the manager :

• Use “Active Directory” as authentication, userDB and passwordDBbackends,

• Export sAMAccountName in a variable declared in exported variables

• Change the user attribute to store in Apache logs (“General Parameters » Logs » REMOTE_USER”): use the variable declared above

Authentication with Kerberos

• Choose “Apache” as authentication module (“General Parameters » Authentication modules » Authentication module”)

• Configure the Apache server that host the portal to use the Apache Kerberos authentication module