Authenticate against LDAP and sync with MySQL

[Stooshie]

I have built an application in PHP/MySQL. To access it, users log in against a users table in MySQL. That all works fine.

Now there is a possibility we will be asked to authenticate against an LDAP server.

I have written a script that can search for a user in an LDAP server.

However, if I get a successful return from LDAP how do I link all the other tables in the Database (that were originally linked to the users table) to the LDAP user?

Any help is appreciated.

[Fou-Lu]

Create an aliasing between an LDAP user and its MySQL user equivalent. This will take a new table to establish the relationship between the current mysql user and its ldap account (can you get the sid from an ldap, or maybe just stuck with dn). Then write an adapter to stand between the mysql account and the ldap account which is capable of resolving a ldap name as a mysql id. This can now be used to associate anything owned by the mysql user with the ldap user.
If you're OO, its likely that this will only take a few minutes. If you're procedural, I'd expect it to take a lot longer.

[Stooshie]

Thanks Fou-Lou. Will try that.