# Re: Rails and Windows Active Directory Authentication?

**URL:** <https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060>\
**Category:** Rails\
**Created:** [February 21, 2006, 9:16pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060 "2006-02-21T21:16:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 21, 2006, 9:16pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/1 "2006-02-21T21:16:13Z")

</div>

> ```
> <removed_email_address@domain.invalid>
> 
> ```
> 
> For MS AD authentication I am currently using:  
> return false if password.to\_s.size == 0
> 
> ```
> # sqlserver_adapter.rb -- ActiveRecord adapter for Microsoft
> 
> ```
> 
> SQL Server  
> #  
> # Author: Joey G. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> # Date: 10/14/2004  
> #  
> # Modifications: DeLynn B. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> # Date: 3/22/2005

Thank you very much for this start. Are you storing any objects (aside  
from  
user & pass) in AD that you are retrieving into the session hash?

Again, many thanks!

---

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 21, 2006, 11:22pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/2 "2006-02-21T23:22:14Z")

</div>

> > For MS AD authentication I am currently using:
> > 
> > - Installed ruby-ldap
> > - Installed login\_generator gem and let the generator build its basic  
> > setup
> > - Modified the generated user model:
> 
> Thank you very much for this start. Are you storing any objects (aside from  
> user & pass) in AD that you are retrieving into the session hash?

At present, I’m just using AD for an authentication yes/no. I will soon  
need  
some authorization, but have not yet decided how I want to proceed. I  
want to  
look at Ezra Z.'s acl\_system plugin and perhaps hook that in  
with  
LDAP to map AD groups to application roles.

I explored ActiveLDAP for a time, but it has more features than I needed  
and  
I didn’t want to mess around at the time with getting access to the  
schema so  
it could be “Active”.

---

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 23, 2006, 8:23pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/3 "2006-02-23T20:23:23Z")

</div>

Here’s a strange bug:

Mac OS X 10.4.5  
OpenLDAP - provided my MAC OS X  
Ruby-LDAP 0.9.3  
Rails 1.0.0

Compiled and loaded Ruby-LDAP. Wrote a test script, and instantly  
talking to a Windows  
Active Directory server.

Fire up the Rails console:

wilig$ script/console  
Loading development environment.

> > require ‘ldap’  
> > =\> true
> 
> > require ‘ldap/control’  
> > =\> true
> 
> > LDAP::Conn.new(‘windowads’, 396)  
> > (irb):3: [BUG] Bus Error  
> > ruby 1.8.4 (2005-12-24) [powerpc-darwin8.4.0]

Abort trap  
wilig$

Freaking odd. What in initializer.rb is doing me so wrong?

Thanks for any insight.

-wilig

---

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 23, 2006, 8:50pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/4 "2006-02-23T20:50:45Z")

</div>

I’m also getting this Abor trap message when using script/console.

It works just fine using straight irb and it is also working fine  
when running through webrick.

It sure is weird. Not sure what is so different about script/console  
than the other methods.

darktower$ ./script/console  
Loading development environment.

> > require ‘ldap’  
> > =\> true
> 
> > require ‘ldap/control’  
> > =\> true
> 
> > conn = LDAP::Conn.new(‘10.10.10.100’, 389)  
> > (irb):3: [BUG] Bus Error  
> > ruby 1.8.4 (2005-12-24) [powerpc-darwin8.5.0]

Abort trap  
darktower$

-Jonathan

---

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 23, 2006, 9:33pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/5 "2006-02-23T21:33:17Z")

</div>

It’s working for me under lighttpd.

-Jonathan

---

<div class="post-metadata">

**Author:** ![mike](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mike](https://www.ruby-forum.com/u/mike)\
**Post date:** [February 23, 2006, 9:15pm UTC](https://www.ruby-forum.com/t/re-rails-and-windows-active-directory-authentication/54060/6 "2006-02-23T21:15:03Z")

</div>

It also fails under Lighttpd, library load path problem?

-wilig