Anyway I think the best way is
to separate option for DN construction and password check.
[+1]
It should work with most servers, but some servers
connect anonymously in
case binding fails. It means that any login/password should work.
This is true for the AD if you pass empty either DN or password, but
even for this case the first time when you try to invoke a method on a
LDAP search result you get:
LDAPException: Operations Error (1) Operations Error
LDAPException: Server Message: 00000000: LdapErr: DSID-0C0905FF,
comment: In order to perform this operation a successful bind must be
completed on the connection., data 0, vece
- Trivial by using username (should work with AD). It
has to be done.
To be precise: domain/username
On Fri, 29 Apr 2005 01:26:13 +0200, you wrote:
>It should work with most servers, but some servers connect anonymously in
>case binding fails. It means that any login/password should work. So
>checking password is needed for some server. Anyway I think the best way is
>to separate option for DN construction and password check.
>
>DN can be constructed either:
>- Search with anonymous binding. Currently supported.
>- Search with binding. Currently supported.
>- Stored in XWiki. Currently supported.
- Trivial by using username (should work with AD). It
has to be done.
>
>Password can be checked either :
>- Check password with binding or anonymous binding. Currently supported.
>- Maybe find a way to do it with Active directory?
>- Try binding with DN/password. Only supported if DN is stored in Xwiki. Can
>be added as an option for other cases.
>
>This way we should cover all cases.
>Any thoughts about that?
>
>Alexis KARTMANN
>email : alexis(a)kartmann.com
>Blog :
http://www.kartmann.com
>ICQ : 258922616
>Yahoo : akartmann
>MSN : alexis(a)kartmann.com
>AIM : alexkartmann
>Jabber : akartmann(a)jabber.fr
>Spype : alexkartmann
>
>
>-----Message d'origine-----
>De : Ludovic Dubost [mailto:ludovic@xwiki.org]
>Envoyé : vendredi 29 avril 2005 01:06
>? : xwiki-dev(a)objectweb.org
>Cc : 'Jiri Luzny'
>Objet : Re: [xwiki-dev] LDAP integration status
>
>
>Hi Alexis,
>
>Shouldn't you bind to the directory to find the DN, then log-out and try
>to log in using the DN and the password ?
>If I remember correctly, this is the way it was done at Netscape.
>It should work even when the password is encrypted.
>
>Ludovic
>
>
>