ldap connection to ad

[schbn]

it would be great if users could authenticate with their ad account.

[chaoos]

This work is in progress (see LDAP branch: https://github.com/imedias/glados/tree/ldap).

LDAP still TODO

• [x] auth model
  • [x] id as hash/uuid (auto generated)
  • [x] sync() in saveConfigFile()
• [x] user migration
  • [x] apply to selection
  • [x] select type
• [x] user table
  • [x] type as number (0 => local, hash => auth method)
• [x] authentication via binduser that browses the ldap
• [x] remove filter & sort in auth index view
• [x] descriptions / attribute hints of all involved fields
• [x] documentation with examples
• [x] new dependency php-ldap
• [x] auth.php and auth.php.bak must be writable by webserver user (www-data)
  • [x] user error if not writable
• [x] remove auth from params.php
• [x] after migration, forget about cookies