Body
LoginLdap authenticates with an LDAP server and uses LDAP information to personalize Matomo.
Installation
To start using LoginLdap, follow these steps:
Step 1. download the LDAP plugin from the Matomo Marketplace.
Step 2. Add this code to the end of the Config.ini.php file
[LoginLdap]
servers[] = "Univ of Pitt Microsoft AD LDAP Server"
use_ldap_for_authentication = 1
enable_synchronize_access_from_ldap = 0
new_user_default_sites_view_access = 19
user_email_suffix = ""
required_member_of = "CN=HSIT - WebAnalyticsLDAP,OU=HSIT - GROUPS,OU=HSIT,OU=Departments,DC=univ,DC=pitt,DC=edu"
required_member_of_field = "memberOf"
ldap_user_filter = "(&(objectClass=Person)(sAMAccountName=*)(memberOf=CN=HSIT - WebAnalyticsLDAP,OU=HSIT - GROUPS,OU=HSIT,OU=Departments,DC=univ,DC=pitt,DC=edu))"
ldap_user_id_field = "cn"
ldap_last_name_field = "sn"
ldap_first_name_field = "givenName"
ldap_alias_field = "cn"
ldap_mail_field = "mail"
ldap_password_field = "unicodePwd"
ldap_view_access_field = "view"
ldap_admin_access_field = "admin"
ldap_superuser_access_field = "superuser"
use_webserver_auth = 1
user_access_attribute_server_specification_delimiter = ";"
user_access_attribute_server_separator = ":"
instance_name = ""
ldap_network_timeout = 15
synchronize_users_after_login = 1
append_user_email_suffix_to_username = 1
strip_domain_from_web_auth = 0
enable_password_confirmation = 0
[LoginLdap_UnivofPittMicrosoftADLDAPServer]
hostname = "pittad.univ.pitt.edu"
port = 389
base_dn = "OU=Accounts,DC=univ,DC=pitt,DC=edu"
admin_user = "CN=hsldap,OU=Accounts,DC=univ,DC=pitt,DC=edu"
admin_pass = "*******"
start_tls = ""
the LDAP user ID filed must be CN other wise Matomo will not find the users.
the USER password field must say unicodePwd in order for this to work as well.
The LDAP password is in Lastpass