<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: use an LDAP attribute for authentification instead of the dn in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/use-an-ldap-attribute-for-authentification-instead-of-the-dn/m-p/50352#M29204</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for your post.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;It is true that simple authentication must use the DN and looking up a user by some other attribute is very useful. However, it assumes you can bind anonymously and have access to read the required attributes.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Digest authentication can be used with the uid. For open ldap the query you have done is effectively done during the authentication process on the server, as opposed to before hand. I believe AD will accept the sAMAccountName but have not confirmed this on the many varients. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Regards&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Andy&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 30 Nov 2006 14:33:59 GMT</pubDate>
    <dc:creator>andy</dc:creator>
    <dc:date>2006-11-30T14:33:59Z</dc:date>
    <item>
      <title>use an LDAP attribute for authentification instead of the dn</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/use-an-ldap-attribute-for-authentification-instead-of-the-dn/m-p/50351#M29203</link>
      <description>we needed to authenticate against our LDAP directory where the user login has been saved as a unique attribute. So our problem was Alfresco only permits to authenticate using the full user dn.I've written this little code to resolve this.1. first you have to set up the file "ldap-authentication-cont</description>
      <pubDate>Mon, 27 Nov 2006 10:20:47 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/use-an-ldap-attribute-for-authentification-instead-of-the-dn/m-p/50351#M29203</guid>
      <dc:creator>bparis</dc:creator>
      <dc:date>2006-11-27T10:20:47Z</dc:date>
    </item>
    <item>
      <title>Re: use an LDAP attribute for authentification instead of the dn</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/use-an-ldap-attribute-for-authentification-instead-of-the-dn/m-p/50352#M29204</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for your post.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;It is true that simple authentication must use the DN and looking up a user by some other attribute is very useful. However, it assumes you can bind anonymously and have access to read the required attributes.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Digest authentication can be used with the uid. For open ldap the query you have done is effectively done during the authentication process on the server, as opposed to before hand. I believe AD will accept the sAMAccountName but have not confirmed this on the many varients. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Regards&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Andy&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 30 Nov 2006 14:33:59 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/use-an-ldap-attribute-for-authentification-instead-of-the-dn/m-p/50352#M29204</guid>
      <dc:creator>andy</dc:creator>
      <dc:date>2006-11-30T14:33:59Z</dc:date>
    </item>
  </channel>
</rss>

