<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Username, but it looks like it’s more complicated. I just got out of a meeting and one of the AD admins gave me several examples of student attribute listing. Looking at the attributes and their values there isn’t actually a specific username, there is a unique
identifier by way of an ID number; and then there are several different attributes with the student’s e-mail address.
<div class=""><br class="">
</div>
<div class="">So I think for right now I may have to hack together a fix for my specific problem and then talk to you about a possible way to incorporate it into the code in a more general way that may be useful for others. 🤷♂️</div>
<div class=""><br class="">
</div>
<div class="">If I’m reading the NSSADAuthenticator.php correctly, you compare their username against “sAMAccountName” but before you do that if someone logged in with an e-mail address, you remove the @domain part.</div>
<div class="">I don’t suppose the @domain that gets chopped off is stored in a variable that I could use for comparisons to force a different search using the full e-mail address against a different attribute? If not I’ll work out something.</div>
<div class=""><br class="">
</div>
<div class="">Again thanks for any help you can provide.</div>
<div class=""><br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="orphans: 2; widows: 2;" class="">------------------------------------------------------</div>
<div style="orphans: 2; widows: 2;" class="">Travis Zimmerman<span class="Apple-tab-span" style="white-space: pre;">
</span><a href="mailto:tzimmerman@fsu.edu" class="">tzimmerman@fsu.edu</a><span class="Apple-tab-span" style="white-space: pre;">
</span>850-645-8030</div>
<div style="orphans: 2; widows: 2;" class="">
<div class="">Linux Enterprise Applications & Systems<span class="Apple-tab-span" style="white-space: pre;">
</span><a href="mailto:its-linuxadmins@fsu.edu" class="">its-linuxadmins@fsu.edu</a></div>
<div class="">Information Technology Services, Florida State University</div>
</div>
</div>
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Apr 30, 2019, at 4:46 AM, Jules Field <<a href="mailto:Jules@Zend.To" class="">Jules@Zend.To</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div text="#000000" bgcolor="#FFFFFF" class="">Travis,<br class="">
<br class="">
Do you mean an alternate attribute for the username, or an alternate attribute from which to read the user's email address?<br class="">
I'm rather assuming the latter, but may be wrong...<br class="">
<br class="">
Currently it reads the user's email address from the "mail" attribute in AD; is it the string "mail" that you want to be able to change for a particular AD forest?<br class="">
<br class="">
Cheers,<br class="">
Jules.<br class="">
<br class="">
<div class="moz-cite-prefix">On 29/04/2019 19:44, Travis Zimmerman via ZendTo wrote:<br class="">
</div>
<blockquote type="cite" cite="mid:WM!34928f50d1e542023efee6bfe83be1c470660949703bffafce8c6f4178edad8b8c7faf56bbb71c28f0ef373d9e32c2a0!@mx.jul.es" class="">
<div class="">Would it be possible to add a variable to the AD auth config to use an alternate attribute for the username?</div>
<div class="">Something like:<span class="Apple-tab-span" style="white-space:pre">
</span>‘authLDAPAltAttr’ => ‘preferredEmail’,</div>
<div class=""><br class="">
</div>
<div class="">Our Microsoft sysadmins had to setup a different AD for students on a different domain (<a href="http://my.fsu.edu/" class="" moz-do-not-send="true">my.fsu.edu</a>) from the one used by faculty and staff (<a href="http://fsu.edu/" class="" moz-do-not-send="true">fsu.edu</a>).
For some reason at the time they had to store the student e-mail address in a different attribute than the standard attribute, in the normal attribute they are storing a student ID number.</div>
<div class=""><br class="">
</div>
<div class="">Up until now I worked around this problem by using the IMAP authentication, not as nice as AD but it did the job to allow students to authenticate in, receive e-mail from the ZendTo server, and view drop-offs for them in their Inbox.</div>
<div class=""><br class="">
</div>
<div class="">We got a new CIO at my university about a month ago and it has been decided to shutdown IMAP and SMTP completely, in favor of MAPI with MFA only. I found out that this change was being talked about last week, upper management came to a decision
last Friday and plan to go ahead with this change starting next week.</div>
<div class=""><br class="">
</div>
<div class="">I appreciate all the work you’ve put into ZendTo over the years.</div>
<br class="">
<div class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="orphans: 2; widows: 2;" class="">------------------------------------------------------</div>
<div style="orphans: 2; widows: 2;" class="">Travis Zimmerman<span class="Apple-tab-span" style="white-space: pre;">
</span><a href="mailto:tzimmerman@fsu.edu" class="" moz-do-not-send="true">tzimmerman@fsu.edu</a><span class="Apple-tab-span" style="white-space: pre;">
</span>850-645-8030</div>
<div style="orphans: 2; widows: 2;" class="">
<div class="">Linux Enterprise Applications & Systems<span class="Apple-tab-span" style="white-space: pre;">
</span><a href="mailto:its-linuxadmins@fsu.edu" class="" moz-do-not-send="true">its-linuxadmins@fsu.edu</a></div>
<div class="">Information Technology Services, Florida State University</div>
</div>
</div>
</div>
<br class="">
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__jul.es_mailman_listinfo_zendto&d=DwMDaQ&c=HPMtquzZjKY31rtkyGRFnQ&r=TZ3x4Nnv5Pp03uwRWF9UlLOaC296m8a1MGVEkWJljsg&m=Ky15pezwlDoQcfjl_3RZsdfB5VdZYIPMvFC_uDgO6YA&s=EcKKZFVwDujx3aSUu3dGlvXh-eVwOT-rNcQuXml2qJw&e=">http://jul.es/mailman/listinfo/zendto</a>
</pre>
</blockquote>
<br class="">
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
'What happened in the past that was painful, has a great deal to
do with what we are today.' - William Glasser
<a class="moz-txt-link-abbreviated" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.Zend.To&d=DwMDaQ&c=HPMtquzZjKY31rtkyGRFnQ&r=TZ3x4Nnv5Pp03uwRWF9UlLOaC296m8a1MGVEkWJljsg&m=Ky15pezwlDoQcfjl_3RZsdfB5VdZYIPMvFC_uDgO6YA&s=7VwiZXK634fmUzQAubkdp5Qajj1qVnqk1n-f4bggYLU&e=">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>