Pre-Baked LAMP server with AD Authentication in Apache
-
I have need of a simple website, one that prompts for an AD username and password, if you enter them correctly you get a "Congrats, you are using the correct username and password" and if wrong, then a "Wrong username and password" page. I could build it from scratch, but I just don't have the time, so a pre-bakes linux install that needs to be slightly customized or a rock solid HowTo is what I need.
Having this in place will help us solve iPad proxy issues we are running into, or at least help us rule out the username and password being entered wrong which will solve ~60% of our iPad tickets and help shape the perception of the issue.
Thanks in advanced!
-
-
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
This might help...
www.randomtechtips.com/validate-domain-authentication-test-ad-password-using-powershell/
He wants a LAMP stack based website to authenticate to AD.
-
@JaredBusch said in Pre-Baked LAMP server with AD Authentication in Apache:
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
This might help...
www.randomtechtips.com/validate-domain-authentication-test-ad-password-using-powershell/
He wants a LAMP stack based website to authenticate to AD.
It seems like that powershell script will accomplish the same task even though it is a different route.
-
Oops I missed the iPad part.
Here is another good solution for PCs ,though. I am still checking into the iPad portion.
-
@jrc said in Pre-Baked LAMP server with AD Authentication in Apache:
I have need of a simple website, one that prompts for an AD username and password, if you enter them correctly you get a "Congrats, you are using the correct username and password" and if wrong, then a "Wrong username and password" page. I could build it from scratch, but I just don't have the time, so a pre-bakes linux install that needs to be slightly customized or a rock solid HowTo is what I need.
Having this in place will help us solve iPad proxy issues we are running into, or at least help us rule out the username and password being entered wrong which will solve ~60% of our iPad tickets and help shape the perception of the issue.
Thanks in advanced!
This github project has not been modified in a year, but looks like it will handle things for you.
https://github.com/adldap/adLDAP
Or you can roll your own by setting up mod_auth_ldap in Apache or PHP based LDAP.
-
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
Oops I missed the iPad part.
@jrc Do you have internal Exchange or AD synchronized Office 365? If so, just have them log into OWA via Safari on their iPad.
-
@JaredBusch said in Pre-Baked LAMP server with AD Authentication in Apache:
@jrc said in Pre-Baked LAMP server with AD Authentication in Apache:
I have need of a simple website, one that prompts for an AD username and password, if you enter them correctly you get a "Congrats, you are using the correct username and password" and if wrong, then a "Wrong username and password" page. I could build it from scratch, but I just don't have the time, so a pre-bakes linux install that needs to be slightly customized or a rock solid HowTo is what I need.
Having this in place will help us solve iPad proxy issues we are running into, or at least help us rule out the username and password being entered wrong which will solve ~60% of our iPad tickets and help shape the perception of the issue.
Thanks in advanced!
This github project has not been modified in a year, but looks like it will handle things for you.
https://github.com/adldap/adLDAP
Or you can roll your own by setting up mod_auth_ldap in Apache or PHP based LDAP.
Beat me to it.
-
Some more details: We use a proxy on the iPads, it requires that the kids sign in once a day on their iPads, they do this with their AD credentials, and it works most of the time.
For the cases that it does not work, we want to have the kids to go to a simple website and try to sign in there. This will then do a few things:
- It helps us rule out the AD password as the issue (which it is in most cases)
- It will help the kids remember their passwords by trying a few times with clear feed back.
- Allow my techs to check that the password we have on file is correct quickly and easily.
- Give us a solid, relatable data point that the school admins can understand and can't argue with (they panic when this issue pops up and treat it like it's a back end system issue and not a user education one).
Have a powershell script is great, but it can't be run by the end user, who only has an iPad, and it has to be a website.
@JaredBusch said
Or you can roll your own by setting up mod_auth_ldap in Apache or PHP based LDAP.
This is what I was thinking to do and was hoping for a clear "1 Do this, 2 Do that ...." type howto.
-
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
@JaredBusch said
This github project has not been modified in a year, but looks like it will handle things for you.
https://github.com/adldap/adLDAP
Or you can roll your own by setting up mod_auth_ldap in Apache or PHP based LDAP.
Beat me to it.
That looks promising, but I know the pieces are out there, getting linux to do LDAP auth is one thing, but where I fall short is getting that to also work in Apache. All of which I could do if I had the time. Hence my need for a clear simple set of instructions to get it working as quickly as possible.
-
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
@JaredBusch said in Pre-Baked LAMP server with AD Authentication in Apache:
@IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:
This might help...
www.randomtechtips.com/validate-domain-authentication-test-ad-password-using-powershell/
He wants a LAMP stack based website to authenticate to AD.
It seems like that powershell script will accomplish the same task even though it is a different route.
But won't run on the desired platform.
