It should work with most servers, but some servers connect anonymously in
case binding fails. It means that any login/password should work. So
checking password is needed for some server. Anyway I think the best way is
to separate option for DN construction and password check.
DN can be constructed either:
- Search with anonymous binding. Currently supported.
- Search with binding. Currently supported.
- Stored in XWiki. Currently supported.
- Trivial by using username (should work with AD). It has to be done.
Password can be checked either :
- Check password with binding or anonymous binding. Currently supported.
- Maybe find a way to do it with Active directory?
- Try binding with DN/password. Only supported if DN is stored in Xwiki. Can
be added as an option for other cases.
This way we should cover all cases.
Any thoughts about that?
Alexis KARTMANN
email : alexis(a)kartmann.com
Blog :
http://www.kartmann.com
ICQ : 258922616
Yahoo : akartmann
MSN : alexis(a)kartmann.com
AIM : alexkartmann
Jabber : akartmann(a)jabber.fr
Spype : alexkartmann
-----Message d'origine-----
De : Ludovic Dubost [mailto:ludovic@xwiki.org]
Envoyé : vendredi 29 avril 2005 01:06
À : xwiki-dev(a)objectweb.org
Cc : 'Jiri Luzny'
Objet : Re: [xwiki-dev] LDAP integration status
Hi Alexis,
Shouldn't you bind to the directory to find the DN, then log-out and try
to log in using the DN and the password ?
If I remember correctly, this is the way it was done at Netscape.
It should work even when the password is encrypted.
Ludovic