內容簡介
本外掛可將您的 WordPress 儀表板轉變為一個熟悉的企業級 LDAP Directory Information Tree (DIT) 管理介面。您可以設定與 LDAPv3 目錄伺服器的連接，從此透過 WordPress 管理介面對您的 WordPress 使用者資料庫所進行的任何修改都會反映在您的 LDAP 資料庫上。這為支援單一簽入 (SSO)、身份管理和其他企業功能提供了更簡單、更方便的前端管理界面。
捐款是我收入的一大部分，如果您持續使用此外掛，請考慮進行捐贈。 🙂 感謝您的支持！
所有 WordPress 使用者帳戶都會在 LDAP 方面以 inetOrgPerson (RFC 2798) 記錄方式儲存。當創建新的 WordPress 使用者時，下列 WordPress 使用者帳戶欄位會轉換為對應的 LDAP 屬性：
- WordPress 的 user_login 欄位轉為 LDAP 資料庫中的 uid 欄位。
- WordPress 的 user_email 欄位轉為 LDAP 資料庫中的 mail 欄位。
- WordPress 的 display_name 欄位轉為 LDAP 資料庫中的 displayName 欄位。
- WordPress 的 user_pass 欄位轉為 LDAP 資料庫中的 userPassword 欄位。
LDAP 中沒有 WordPress 使用者 ID 的對應，而是以其完整的識別名稱 (DN) 作為唯一識別。使用者的 DN 是自動產生的，其由 WordPress 的 user_login 及 WordPress Multisite 的設置 LDAP Search Base 組成。例如，一個安裝了 WP-LDAP 的 WordPress Multisite 站點，運行在 https://example.com/，若使用者名稱為 exampleuser，則其會自動被複製至 LDAP 中的 uid=exampleuser,dc=example,dc=com 位置。
另外，當使用者更新其使用者資訊時，下列 WordPress 使用者帳戶欄位將自動轉換為 LDAP 屬性：
- WordPress 的 first_name 欄位轉為 LDAP 資料庫中的 givenName 欄位。
- WordPress 的 last_name 欄位轉為 LDAP 資料庫中的 sn 欄位。
- WordPress 的 nickname 欄位轉為 LDAP 資料庫中的 cn 欄位。
- WordPress 的 description 欄位轉為 LDAP 資料庫中的 description 欄位。
- WordPress 的 user_url 欄位轉為 LDAP 資料庫中的 labeledURI 欄位。
- WordPress 使用者的頭像轉為 LDAP 資料庫中的 jpegPhoto 欄位。（尚未實現。）
此外，WP-LDAP 知道某些外掛提供的特定功能，包括：
- WordPress 使用者的 S/MIME 憑證 (smime_certificate 欄位) 轉為 LDAP 資料庫中的 userSMIMECertificate 欄位。（這個功能由 WP PGP Encrypted Emails 外掛提供，必須安裝並啟用該外掛才能使用。）
此外，本外掛設計用於中型到大型的 WordPress Multisite（或多重網路）實例，原始碼位於：
外掛標籤
開發者團隊
原文外掛簡介
This plugin turns your WordPress Dashboard into a familiar management interface for an enterprise-scale LDAP Directory Information Tree (DIT). Configure a connection to your LDAPv3 directory server, and from then on any modifications you make to your WordPress user database through the WordPress admin screens will be reflected in your LDAP database. This offers a simpler and more convenient front-end for managing user account information to support single sign-on (SSO), identity management, and other enterprise functions.
Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider making a donation. 🙂 Thank you for your support!
All user accounts on the WordPress side are mirrored as inetOrgPerson (RFC 2798) entries on the LDAP side. The following WordPress user account fields to LDAP attribute translations take place when a new WordPress user is created:
The WordPress user_login field becomes the uid attribute in the LDAP database.
The WordPress user_email field becomes the mail attribute in the LDAP database.
The WordPress display_name field becomes the displayName attribute in the LDAP database.
The WordPress user_pass field becomes the userPassword attribute in the LDAP database.
There is no mapping for the WordPress user ID number on the LDAP side. Instead, users are uniquely identified by their fully-qualified Distinguished Name (DN). A user’s DN is automatically composed by combining their WordPress user_login with the WordPress Multisite’s configured LDAP Search Base setting. For instance, by default, a WordPress Multisite with WP-LDAP installed running at https://example.com/ with a user whose username is exampleuser will automatically be mirrored over LDAP to the user identified as uid=exampleuser,dc=example,dc=com.
In addition to the above mappings, the following optional mappings also take place if or when the user updates their user profile:
The WordPress first_name field becomes the givenName attribute in the LDAP database.
The WordPress last_name field becomes the sn attribute in the LDAP database.
The WordPress nickname field becomes the cn attribute in the LDAP database.
The WordPress description field becomes the description attribute in the LDAP database.
The WordPress user_url field becomes the labeledURI attribute in the LDAP database.
The WordPress user’s avatar becomes the jpegPhoto attribute in the LDAP database. (Not yet implemented.)
Moreover, WP-LDAP is aware of certain features provided by other plugins. These include:
The WordPress user’s S/MIME certificate (smime_certificate field) becomes the userSMIMECertificate attribute in the LDAP database. (This functionality is provided by the WP PGP Encrypted Emails plugin and that plugin must be installed and activated for this to work.)
This plugin is designed for medium to large deployments of WordPress Multisite (or Multi-Network) instances, originally developed as a collaboration with the Glocal Coop’s Activist Network Platform project. If you run multiple WordPress Multisite Networks, you can configure each WP Network with different LDAP settings. This plugin does not currently support single-site installs; please post an issue on GitHub if you want to use LDAP data stores with a WP single-site install and we can discuss use cases.
This plugin is free software, but grocery stores do not offer free food. Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider making a donation. 🙂 Thank you for your support!
