Anyway I think the best way is to separate option for DN construction and password check.
[+1]
It should work with most servers, but some servers connect anonymously in case binding fails. It means that any login/password should work.
This is true for the AD if you pass empty either DN or password, but even for this case the first time when you try to invoke a method on a LDAP search result you get: LDAPException: Operations Error (1) Operations Error LDAPException: Server Message: 00000000: LdapErr: DSID-0C0905FF, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece
- Trivial by using username (should work with AD). It has to be done.
To be precise: domain/username On Fri, 29 Apr 2005 01:26:13 +0200, you wrote:
It should work with most servers, but some servers connect anonymously in case binding fails. It means that any login/password should work. So checking password is needed for some server. Anyway I think the best way is to separate option for DN construction and password check.
DN can be constructed either: - Search with anonymous binding. Currently supported. - Search with binding. Currently supported. - Stored in XWiki. Currently supported. - Trivial by using username (should work with AD). It has to be done.
Password can be checked either : - Check password with binding or anonymous binding. Currently supported. - Maybe find a way to do it with Active directory? - Try binding with DN/password. Only supported if DN is stored in Xwiki. Can be added as an option for other cases.
This way we should cover all cases. Any thoughts about that?
Alexis KARTMANN email : [email protected] Blog : http://www.kartmann.com ICQ : 258922616 Yahoo : akartmann MSN : [email protected] AIM : alexkartmann Jabber : [email protected] Spype : alexkartmann
-----Message d'origine----- De : Ludovic Dubost [mailto:[email protected]] Envoyé : vendredi 29 avril 2005 01:06 ? : [email protected] Cc : 'Jiri Luzny' Objet : Re: [xwiki-dev] LDAP integration status
Hi Alexis,
Shouldn't you bind to the directory to find the DN, then log-out and try to log in using the DN and the password ? If I remember correctly, this is the way it was done at Netscape. It should work even when the password is encrypted.
Ludovic