config = include('config.ldap.php'); } public function authenticate($username, $password) { $ldaprdn = $this->config['ldap_user_prefix'] . $username . $this->config['ldap_user_suffix']; $this->ldapconn = ldap_connect($this->config['ldap_host'], $this->config['ldap_port']); if (!$this->ldapconn) return false; ldap_set_option($this->ldapconn, LDAP_OPT_PROTOCOL_VERSION, 3); ldap_set_option($this->ldapconn, LDAP_OPT_REFERRALS, 0); // Try to bind as the user if (@ldap_bind($this->ldapconn, $ldaprdn, $password)) { // Optionally, fetch user info from LDAP and sync with Vtiger return true; } return false; } public function __destruct() { if ($this->ldapconn) ldap_unbind($this->ldapconn); } } ?> 'ldap://your-ad-server.example.com', // e.g. ldap://ad.example.com 'ldap_port' => 389, // 636 for LDAPS 'ldap_user_prefix' => 'DOMAIN\\', // e.g. 'CORP\\' 'ldap_user_suffix' => '', // e.g. '@example.com' or leave blank // Optionally, add base DN and search filter for user info sync // 'ldap_base_dn' => 'DC=example,DC=com', // 'ldap_search_filter' => '(sAMAccountName=%USERNAME%)', ]; ?> authenticate($username, $password)) { // Optionally, auto-create user in Vtiger if not exists return true; } // ... (rest of the function) return false; } // ... (rest of the file) ?> # Vtiger CRM 7.1 SSO Integration with Microsoft LDAP (Active Directory) ## Steps 1. **Copy Files** - Place `LDAP.php` and `config.ldap.php` in `modules/Users/authTypes/` - Edit `modules/Users/Users.php` as shown to add LDAP authentication 2. **Configure LDAP** - Edit `config.ldap.php` with your AD server, port, and domain prefix. 3. **Test Login** - Use your AD credentials on the Vtiger login page. ## Notes - This is a basic integration. For production, consider: - Auto-provisioning users from LDAP to Vtiger - Mapping LDAP attributes to Vtiger fields - Using LDAPS (port 636) for secure connections - Error handling and logging - For advanced SSO (e.g., SAML, OAuth), a plugin or middleware is required. ## Troubleshooting - Check PHP LDAP extension is enabled. - Use correct domain prefix (e.g., `CORP\username`). - Check AD server firewall and credentials. ## References - [PHP LDAP Manual](https://www.php.net/manual/en/book.ldap.php) - [Vtiger Developer Docs](https://community.vtiger.com/help/vtigercrm/developers/)