topic Re: LDAP: objecclass definition with authentication in Alfresco Archive

LDAP: objecclass definition with authentication

simon — Thu, 20 Apr 2006 16:20:03 GMT

Hi Andy,Another LDAP question for you… I'm sorry.We are trying to authenticate against OpenLDAP. All our users are stored in 1 OU in 1 LDAP, no referrals or chaining (let's keep it simple for once).Not all the users have the same objectclasses, some of them are form the person object class, some hav

Re: LDAP: objecclass definition with authentication

andy — Fri, 21 Apr 2006 08:18:56 GMT

Hi Simon

There is nothing in Alfresco to do this. I don't think there is anything in the underlying support either.

Your best bet is to use digest authentication in OpenLDAP.
This has a redirection query to find the user entry from the user id.
You could use this query to limit the users actually found.

If you are using simple authentication you want it to be as if some DN is not visible. The only way I can think of to do this is with permissions. I am not sure how permissions and authentication interact in OpenLDAP.

Regards

Andy

Re: LDAP: objecclass definition with authentication

simon — Wed, 26 Apr 2006 07:04:30 GMT

You are right…

We use simple authentication (DIGEST-MD5 is not an option, we need to encrypt the password afterwards to use SASL as described in some other topic) but I forgot about the DN stuff. Indeed, there is no way to filter the DN if we specify the full path.

Well have to find another way out of this. Thanks anyway!