Development/LDAP

From Sit

Jump to: navigation, search

Contents

LDAP Design

The LDAP functionaliy of SiT! has been designed to sit transparently in front of the existing database.

LDAP User/Agent Authentication

  • Is username/password in local SiT! database?
    • YES: Are we using LDAP?
      • YES: Resync user details from LDAP to local database
    • NO: Are we using LDAP?
      • YES: Is the Username/Password in LDAP?
      • YES: Create & Import user account

Import/Creating a user/agent account from LDAP

  • Get the usertype of the user from LDAP (determined by group membership)
  • Extract details of user from LDAP based on $CONFIG["ldap_attr_map"]
  • Create the account for the user in the database

Update/Resync a user account from LDAP

This is identical to Import/Create however it updates the database record rather than creates it.

Customer authentication

When a customer logs on for the first time, exactly the same process occurs as outlined for a user.

Auto creation of customer from incident

If a customer/contact emails the helpdesk, but they have never logged on, they will not as yet have an account created in the database. This means that incidents cannot be created. However, if $CONFIG["ldap_autocreate_customer"] is set, then SiT! will do a lookup for people in the customer LDAP group that match the incoming email address. If a match is found, the customer's details are imported into a new contact account.

Development

Personal tools
project