An LDAP web frontend written in PHP.
esbart allows organisations to easily maintain an LDAP directory. It provides an oriented interface based on typical domain controller functionalities related to user accounts, their credentials and memberships, et cetera.
The software will also deliver one-time password change tokens via email to streamline unattended credential management, and also instructional emails to welcome and set users up.
- An LDAP directory (OpenLDAP for instance)
- A webserver
- A MySQL/MariaDB database (for storing password change tokens)
- A Mail Transmission Agent
- PHP modules
- php-mbstring
- php-ldap
The single-table database can be created pushing database.sql to MariaDB
mysql < database.sql
The configuration keys in regards of the database connection can be found in config.php, MariaDB section.
The unused password change keys can be expired regularly using cron. An hourly run will ensure that they are expired quite close past TOKEN_EXPIRES_H:
sudo crontab -u apache -l
0 * * * * /bin/php -f /path/to/cron.php
Or manually
sudo -u apache /bin/php -f /path/to/cron.php
The so-called config.php file also allows configuring as per the below settings, amongst others:
| Setting | Description |
|---|---|
MODE |
Switches from light to dark CSS style |
LOGGING |
Activates a pair of access logfiles under log/ |
LDAP_AUTH_GROUP |
Establishes the group of users that can access esbart |
LDAP_GROUP_EXCLUSIONS |
Establishes the groups that are not manageable in esbart |
LDAP_SAMBA_SID |
Sets the Samba domain SID prefix |
The software can be easily localised with language files under locale/.
esbart will look after the Samba credentials as well, sambaNTpassword, which will be synced to the main password userPassword.
The previous screenshot shows a simplified user creation form called assisted mode. It sorts out the user name automatically matching an specific format and dispatches the password creation email request on the fly.
This project is licensed under the GNU General Public License - see the LICENSE file for details.