LDAP Tools/Schema
From Authentication Tools for Joomla! (JAuthTools)
Joomla! has an assigned enterprise number from IANA. This space is maintained by Samuel Moffatt. The aim of this is to provide extensions to LDAP to make it more friendly to Joomla! powered authentication and to provide extensions in future where they may be required.
Contents |
Number allocation (1.3.6.1.4.1.27457)
Joomla! has been assigned the enterprise number 27457 within the space 1.3.6.1.4.1 and within this space the first entry, 1, is designated for Official Core use.
Official Joomla Schema (1.3.6.1.4.1.27457.1)
Officially supported Joomla! schemas are created within this space.
JoomlaGroup (1.3.6.1.4.1.27457.1.1)
Teh JoomlaGroup attribute is designated so that a JoomlaGroup attribute may be added to users easily that doesn't conflict with any other LDAP attribute.
# Joomla Group Attribute; free form text attributetype ( 1.3.6.1.4.1.27457.1.1 NAME 'JoomlaGroup' DESC 'Joomla: Group to belong to' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
JoomlaUser (1.3.6.1.4.1.27457.1.2)
The JoomlaUser object class exists to enforce and permit certain attributes for an entry to better integrate with Joomla.
# Joomla User Object Class # Requires various elements objectclass ( 1.3.6.1.4.1.27457.1.2 NAME 'JoomlaUser' DESC 'User of a Joomla instance' AUXILIARY MUST ( cn $ JoomlaGroup $ uid $ mail $ userPassword ) MAY ( givenName $ sn ) )
uidAlias/useridAlias (1.3.6.1.4.1.27457.1.3)
The user ID alias is used to enable redundant user ID's to be designated. The primary user ID field will actually identify the user. This is useful for migrating legacy systems with duplicate user ID's for distinct individuals.
# Joomla User Alias attribute; free form text attributetype ( 1.3.6.1.4.1.27457.1.3 NAME ('uidAlias' 'useridAlias') DESC 'Aliased user id' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
Full Schema
Copy this text into a file (e.g. joomla.schema) to include in your LDAP system (e.g. copy it to /etc/ldap/schema). If you are using OpenLDAP on Debian, creating the file /etc/ldap/schema/joomla.schema and adding:
include /etc/ldap/schema/joomla.schema
to your /etc/ldap/slapd.conf file should work.
joomla.schema:
# Joomla Group Attribute; free form text attributetype ( 1.3.6.1.4.1.27457.1.1 NAME 'JoomlaGroup' DESC 'Joomla: Group to belong to' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) # Joomla User Alias attribute; free form text attributetype ( 1.3.6.1.4.1.27457.1.3 NAME ('uidAlias' 'useridAlias') DESC 'Aliased user id' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) # Joomla User Object Class # Requires various elements # Extra name details are optional objectclass ( 1.3.6.1.4.1.27457.1.2 NAME 'JoomlaUser' DESC 'User of a Joomla instance' AUXILIARY MUST ( cn $ JoomlaGroup $ uid $ mail $ userPassword ) MAY ( givenName $ sn $ useridAlias $ displayName $ givenName $ initials ) )