OpenWideSynchronizeLdapUser for eZ Publish

Extension:	OpenWideSynchronizeLdapUser v1.0
Requires:	eZ Publish 5.3.x or newer and IMAG/LDAP bundle
Author:	Open Wide http://www.openwide.fr

Presentation

This bundle connect ldap user and create user ldap in ezpublish if there is no.

Licence

This eZ Publish extension is provided as is, in GPL v3 (see LICENCE)

What do you need ?

EzPublish 5.3 or 5.4 IMAG/LDAP Bundle Configure security.yml and config.yml

Configure IMAG/LDAP Bundle

See https://github.com/BorisMorel/LdapBundle

Get the Bundle

Composer

Add OpenWideSynchronizeLdapUser in your project's composer.json

{
    "require": {
        "open-wide/synchronizeldapuser-bundle": "dev-master"
    }
}

Enable the Bundle

<?php
// ezpublish/EzPublishKernel.php

public function registerBundles()
{
    $bundles = array(
        // ...
        new OpenWide\SynchronizeLdapUserBundle\OpenWideSynchronizeLdapUserBundle(),
    );
}

Configure ezpublish class user and user group

You must create fields in your user and user group classes Exmple : mail, cn, sn, uid ...... Fields declared in config.yml must exist.

Configure user group

Create an user group Exemple UserLDAP Configure content_id and location_id in parent_group_content_id and parent_group_location_id. Ldap users will be created in this group.

Configure yml

First configure security.yml.

security:
    encoders:
        Symfony\Component\Security\Core\User\User: plaintext
        IMAG\LdapBundle\User\LdapUser: plaintext

    role_hierarchy:
        ROLE_USER:          IS_AUTHENTICATED_ANONYMOUSLY
        ROLE_INSCRIT:       ROLE_USER

    providers:
        chain_provider:
            chain:
                providers: [ldap,ezpublish]
        ezpublish:
            id: ezpublish.security.user_provider
        ldap:
            id: imag_ldap.security.user.provider

    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        ezpublish_setup:
            pattern: ^/ezsetup
            security: false

        ezpublish_rest:
            pattern: ^/api/ezp/v2
            stateless: true
            ezpublish_http_basic:
                realm: eZ Publish REST API

        ezpublish_front:
            pattern: ^/
            anonymous: ~
            imag_ldap:
                provider: chain_provider
            form_login:
                require_previous_session: false
                always_use_default_target_path: false
                default_target_path: /

security:
    access_control:

        # Routes exceptions sans accès loggué
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }

        # Routes avec accès loggué
        - { path: ^/, role: [ROLE_USER] }

Then configures config.yml.

openwide_synchronize_ldap_user:
    enabled: true
    synchronize: true
    parent_group_content_id: 223
    parent_group_location_id: 218
    mode: update
    verbose: true
    #you must define at least one field in user and group (example dn)
    fields:
        user:
            dn: { value: dn }
            first_name: { value: sn}
            last_name: { value: sn}
            mail: { value: mail }
            cn: { value: cn }
            sn: { value: sn }
            uid: { value: uid }
            givenname: { value: givenName }
        group:
            name: { value: ou }
            ou: { value: ou }
            cn: { value: cn }
            dn: { value: dn }
    ldap:
        base_dn: dc=example,dc=com
        filter_user: '(&(objectclass=person)(uid=**USERNAME**))'
        filter_group: '(&(objectclass=groupOfUniqueNames)(uniquemember=uid=**USERNAME**,dc=example,dc=com))'

DOC

enabled

active or not the bundle

synchronize

If enabled, the bundle synchronize users It copies the users and groups in the EZ base

parent_group_content_id

User group content identifier in which all users will be copied

parent_group_location_id

User group location identifier in which all users will be copied

mode

add: users are created on the first connection update: users are created in the first connection and then modified

verbose

If enabled, you write more info in log file

fields

List of fields copied for user and user group Syntax: <Ez Field>: { value: <LDAP field>}

ldap

Configuring ldap search filters