RE: Authentication to 2 LDAP Domains

"Scott C. Lemon" <[email protected]>
Newsgroups gmane.network.nocat
Organization HumanXtensions L.L.C.
Message-ID <008401c5c786$d6093580$370a640a@NewCell>
Hmmm ... Had never thought about doing this ...

If you look at LDAP.pm, the subroutine that is key is the
'authenticate_user' sub.  Now there are issues:

1. Are you trying two 'domains' on the same LDAP server?  Two containers
(OUs)?
Currently, the search that is done *ought* to pick up a user regardless of
the container they are in.

2. I am guessing that you are not caring about *adding* new users via NoCat?
If you modify the authenticate_user sub, then it might check two places, but
when adding a user there is no simple code to determine *where* in the
directory you add users.  Currently I am just adding to a single container.

It appears that if you want to try checking two servers it could be done ...
If you clarify exactly what you want to do I might be able to make some
suggestions ... Or even hack out a quick hack to try.  :-)


Scott C. Lemon
 
 


-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of DeWayne Mangan
Sent: Tuesday, September 27, 2005 1:34 PM
To: [email protected]
Subject: [NoCat] Authentication to 2 LDAP Domains


All:

I've successfully had a gateway/authserv setup authenticating to one LDAP
server for several months now.  However, I'd like to add a second domain to
the mix.  Has anyone created a setup where a user gives their info to nocat
and it checks LDAP domain #1 for that information, and then (if it doesn't
find it) it checks LDAP domain #2?  (Obviously, if the info doesn't exist in
both domains, then the user gets denied).

I've tried looking into the lib\NoCat\Source\LDAP.pm source code, but my
perl knowledge is only to the level of "just dangerous enough to know how to
break things, but not fix them," so I haven't been able to do much with it.
 
Thanks!
 
DeWayne Mangan
ITS Infrastructure Manager
Concordia University at Austin
3400 IH 35 North
Austin, TX 78705
 
"There are only 10 types of people in this world; those who understand
binary, and those who don't."
--------------------------------------------------
 

_______________________________________________
NoCat mailing list
[email protected] http://lists.nocat.net/mailman/listinfo/nocat
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.