Note that All IP’s or A Records listed above will need to be allowed to talk with your LDAP server as we load balance requests between multiple servers during busy periods and at times of server maintenance.
What SchoolBooking needs to know
Before proceeding you should work these settings out by using the LDAP test tool before entering details into SchoolBooking.
This is the address of your server, it needs to start with either LDAP:// or LDAPS:// followed by either an external hostname or an external IP Address.
An example of this address would be: LDAP://mytestserver.mydomain.com.
Base DN including users
A Base DN is the top level of the LDAP directory tree. A minimum example of a Base DN would probably look something like:-
DC=school, DC=test, DC=server, DC=sch, DC=uk
Again you will need to find these settings out using the LDAP client previously mentioned in the “Getting Started” section.
If you use active directory, it is likely that your users will be held in an Organisation unit (it looks like a folder)
We suggest you also include a path to your users Organisational Unit within your Base DN as it will increase performance when SchoolBooking authenticates, and can also allow you to include / exclude users from accessing SchoolBooking.
If you specify a particular Organisational Unit, only users within that Organisational Unit and any child Organisational Unit will be seen by SchoolBooking.
For our example, if my server had an Organisational Unit named “my users” with a child Organisational Unit named “staff”, the path I would specify would be:
OU=staff, OU= my users, DC=school, DC=test, DC=server, DC=sch, DC=uk
Note that OU = Organisational Unit.
Watch out for the default “users” folder on Active Directory!
A standard Active Directory installation has a “users” folder within the root/base of active directory. It looks like an Organisational Unit but is instead a Common Name. If we tried to specify it in the above example it would fail, instead we need to reference it using the CN abbreviation and not an OU abbreviation, See the example below.
CN= users, DC=school, DC=test, DC=server, DC=sch, DC=uk.
We have already looked at ways of filtering out users to increase performance and limit users by specifying Organisational Units within the Base DN. The filter field will filter whatever is left after Base DN has done its job.
For SchoolBooking to know what to look for, we have to write a filter. It is worth Googling, but as an example the following filter would allow all users within your specified Base DN. :-
Note: - if you leave the filter field blank the above bare minimum filter will automatically be applied.