PHP AD LDAP Authenticator

h1. Setup

This can be used for users and/or staff

h1. Users:

* Login to your admin

* Go to Users

** Its on the top grey bar under the logo and to the right

* LoginShare

** On the bar directly under Users

* Enable LoginShare

** Change it to Yes

* Give it a title

** For example: Network Login

* Enter the url to your ldap.php 

** Example: http://www.mysite.com/kayako/ldap.php

* Update

h1. Staff:

In order for you to have Staff integration you need to have a valid AD group in which the users must be in and a valid Kayako staff team for them to be a part of.  The reason for this is if not setup this way then anyone could login to the staff area.

One way you can handle this is to create a AD group called Kayako Staff and put all the users you want to access the staff area into it.  

Then go to insert team:

http://www.yoursite.com/admin/index.php?/Base/StaffGroup/Insert

And add a new team, for example Staff.  Now when you get the $staff_groups = array('Group' => 'Staff'); part of the required configuration settings it will make more sense.

* Login to your admin

* Staff 

** Its on the top grey bar under the logo

* LoginShare

** On the bar and to the right

* Enable LoginShare

** Change it to Yes

* Give it a title

** For example: Network Login

* Enter the url to your ldap.php with ?type=staff

** Example: http://www.mysite.com/kayako/ldap.php?type=staff

* Update

h1. Optional

h2. Logging

If you plan to use logging you must make the ldap/log directory writable (755 or 777).  Honestly I would just do it just in case.

h2. Disable Kayako Registration

* Login to your admin

* Widgets 

* Register

* Change to disabled

h2. Remove lost password from the template

* Login to your admin

* Templates

* Templates

* General

* Header

* Find and remove (Around the middle):

<pre><div id="logintext"><a href="<{$_baseName}><{$_templateGroupPrefix}>/Base/UserLostPassword/Index"><{$_language[lostpassword]}></a></div></pre>

** Or you can hide it using <!-- -->

* You may also want to remove the ability to change their password to do so find and remove:

<pre><div class="maitem machangepassword" onclick="javascript: Redirect('<{$_baseName}><{$_templateGroupPrefix}>/Base/UserAccount/ChangePassword');"><{$_language[machangepassword]}></div></pre>

** Or you can hide it using <!-- -->

* Save

h2. Change the text on the login box from "Your email address"

* Login to your admin

* Languages

* Phrases

* You want loginenteremail, you can scroll through until you find it or use search

* Change to the text you want (IE Your username)

* Update