內容簡介
此外掛可讓 WordPress 與 Active Directory 網域進行驗證、授權、建立和更新。此外掛在 Active Directory Integration 外掛的基礎上做了大量修改，以便與 WordPress 的多站台和多網路安裝相容。
此外掛的一些功能包括：
對多個 AD 伺服器進行驗證（以平衡負載）
按 Active Directory 群組成員資格授權使用者
自動建立和更新可以驗證 AD 的使用者，將 AD 群組映射到 WordPress 角色
使用 TLS（或 LDAPS）進行安全通訊來連接 AD 伺服器（建議使用）
使用非標準連接埠進行通訊
保護防止暴力攻擊
在登入失敗的情況下，讓使用者和/或管理員收到電子郵件通知
從 AD 屬性（sAMAccountName、displayName、description、SN、CN、givenName 或 mail）決定 WP 顯示名稱
啟用/停用對本地（非 AD）WP 使用者的密碼更改
相容於 WordPress 3.0/3.1，包括多站台和多網路
此外掛基於 glatze 的 Active Directory Integration 外掛，基於 Jonathan Marc Bearak 的 Active Directory Authentication 外掛和非常有用的 PHP 類別引擎 Scott Barnett 的 adLDAP。
除了改動以提高其與 WordPress 多站台的相容性之外，此版本的外掛還加密了儲存在資料庫中與 AD 伺服器連接所使用的密碼。
此外掛是由 Curtiss Grymala 為 Mary Washington 大學 開發。外掛的授權條款為 GPL2，這基本上意味著您可以隨心所欲地使用、修改它，只要保留原始的版權和授權資訊即可。
重要通知
由於我目前沒有多個 AD 伺服器的存取權限，因此此外掛僅在單一 WordPress 安裝及單一 AD 伺服器上進行測試。因此，可能存在重大的錯誤。
目前我正在尋求人們測試此外掛，因此請報告任何問題。
需求
此外掛需要 WordPress。它可能與舊版 3.0 以下的 WordPress 兼容，但並未經過測試。
此外掛還需要 PHP5。它已嘗試與 PHP4 兼容，但沒有在該環境中測試。
此外掛需要 LDAP 支援已編譯到 PHP 中。如果 ldap_connect() 函數不可用，則此外掛將輸出錯誤訊息並不會執行任何操作。
待辦事項
添加驗證多個 AD 伺服器的能力（檢查一個，然後檢查另一個，而不只是像目前的外掛那樣負載平衡）
已解決 0.4a 版本- 更新管理介面，使用原生的 meta box 介面而非自訂佈局
已解決 0.3a 版本- 在「自動更新使用者」設定中，將個人資訊與角色相等的群組分開處理
外掛標籤
開發者團隊
② 後台搜尋「Active Directory Authentication Integration」→ 直接安裝（推薦）
原文外掛簡介
This plugin allows WordPress to authenticate, authorize, create and update against an Active Directory domain. This plugin is based heavily on the Active Directory Integration plugin, but has been modified to work with Multi Site and even Multi Network installations of WordPress.
Some of the features included in this plugin are:
authenticate against more than one AD Server (for balanced load)
authorize users by Active Directory group memberships
auto create and update users that can authenticate against AD
mapping of AD groups to WordPress roles
use TLS (or LDAPS) for secure communication to AD Servers (recommended)
use non standard port for communication to AD Servers
protection against brute force attacks
user and/or admin e-mail notification on failed login attempts
determine WP display name from AD attributes (sAMAccountName, displayName, description, SN, CN, givenName or mail)
enable/disable password changes for local (non AD) WP users
WordPress 3.0/3.1 compatibility, including Multi Site and Multi Network
This plugin is based on glatze’s Active Directory Integration plugin, which is based upon Jonathan Marc Bearak’s Active Directory Authentication plugin and Scott Barnett’s adLDAP, a very useful PHP class.
Aside from the changes to make this plugin work more effectively with WordPress Multi Site, this version of the plugin also encrypts the password used to connect to the AD server when it is stored in the database.
This plugin was developed by Curtiss Grymala for the University of Mary Washington. It is licensed under the GPL2, which basically means you can take it, break it and change it any way you want, as long as the original credit and license information remains somewhere in the package.
Important Notice
Since I don’t currently have access to multiple AD servers, this plugin has only been tested on a single installation of WordPress with a single AD server. Therefore, it is entirely possible that there are major bugs.
At this time, I am seeking people to test the plugin, so please report any issues you encounter.
Requirements
This plugin requires WordPress. It might work with versions older than 3.0, but it has not been tested with those.
This plugin also requires PHP5. Some attempt has been made to make it compatible with PHP4, but it has not been tested in that environment.
This plugin requires LDAP support to be compiled into PHP. If the ldap_connect() function is not available, this plugin will output an error message and will not do anything.
To Do
Add ability to validate against multiple AD servers (check one, then the other – rather than just load-balancing as the plugin currently does)
DONE as of 0.4a – Update admin interface to utilize native meta box interface rather than custom layout
DONE as of 0.3a – Separate the profile information from the role equivalent groups in the “auto update user” setting
