Set up Drupal to create new user accounts in LDAP

[tmitchell]

• Directly related to ​http://trac.osgeo.org/trac/osgeo/ticket/28, but instead make Drupal serve as a primary interface for creating new user accounts that are stored in LDAP

[tmitchell]

• It appears that this may be available via the Drupal LDAP Module right out-of-the-box as long as advanced module settings include certain rights as Manager in LDAP (which ours do) # To test, Kanhaiya and I had to switch the LDAP Module to only allow authentication through LDAP and not through Drupal's internal user table. This was only done for a minute as it has the potential to lock out many Drupal users. # Then new user registration was enabled and a dummy user registered. This worked as normal. # Remaining question was whether this creates the user account in LDAP or not. Initial tests show it did not, though the user was able to log in when only LDAP authentication was enabled.

[tmitchell]

(Fixing formatting...)

• It appears that this may be available via the Drupal LDAP Module right out-of-the-box as long as advanced module settings include certain rights as Manager in LDAP (which ours do)

1. To test, Kanhaiya and I had to switch the LDAP Module to only allow authentication through LDAP and not through Drupal's internal user table. This was only done for a minute as it has the potential to lock out many Drupal users.
2. Then new user registration was enabled and a dummy user registered. This worked as normal.
3. Remaining question was whether this creates the user account in LDAP or not. Initial tests show it did not, though the user was able to log in when only LDAP authentication was enabled.

[warmerdam]

I have written a simple forms driven python script to create new ldap users:

​https://www.osgeo.org/cgi-bin/ldap_create_user.py

Hopefully this will take some of the pressure off...

[warmerdam]

Tyler,

Should we close this ticket, and just use ldap_create_user.py?

I'd note for posterity that there are various ldap related resources at:

​http://www.osgeo.org/osgeo_userid

[tmitchell]

LDAP authentication is working fine for Drupal now. I would also like to make it possible for users to modify their attributes, but it seems our LDAP set up does not allow this (i.e. writing only can be done by the LDAP Manager user). Can anyone confirm this?