Using LDAP

This section describes the process of configuring LDAP with IceHrm.

PHP ldap extension #

PHP LDAP extension should be installed for LDAP to work. Also, make sure you can connect to the LDAP host via the provided port.

Before using please install PHP-LDAP module.

For PHP 5.3 $> sudo apt-get install php5-ldap
For PHP 7.0 $> sudo apt-get install php-ldap
For PHP 7.3 $> sudo apt-get install php7.3-ldap

For using PHP LDAP on windows please refer

Enabling LDAP #

LDAP can be enabled via System -> Settings -> LDAP. Make sure to configure all the parameters correctly

Creating a LDAP User #

IceHrm can not extract users automatically from LDAP. You need to create a matching user in IceHrm with the same username. For example, if you have a user in your LDAP with username “user1″ and password “pass123”. Then you need to:

  1. Create a user in icehrm with username “user1”
  2. No need to set a password, as we will use LDAP to authenticate this user
  3. The new user can login with username “user1” and password “pass123”, which is his/her LDAP password

No LDAP for user with username “admin” #

The user “admin” will always login with the local DB username and password (even LDAP is enabled).

Testing LDAP with a test server #

This is a way to debug your LDAP setup. You can try to connect to a test LDAP server to find out if the problem is with your LDAP setup or IceHrm.

Use these configs to test LDAP connection with the following test LDAP server

Change configs as follows under System->Settings #

LDAP: EnabledYes
LDAP: Port389
LDAP: Manager DNcn=read-only-admin,dc=example,dc=com
LDAP: Manager Passwordpassword
LDAP: Version 3Yes
LDAP: User Filteruid={}

Then create a user with username “riemann” under System->Users.

Logout and try login with riemann/password

Issue with LDAP #

If you are facing login issues after enabling LDAP, you can still login as user “admin” and disable LDAP.

Powered by BetterDocs