RE: Authentication to 2 LDAP Domains

Scott,

1.) I have 2 LDAP servers (each with their own domain) that I want to
try.  Each server would require it's own set of LDAP_ attributes.  Ex:

--------------------

When a user gives nocat their login info try:
 LDAP_Host              ldapserver.ctx.edu
 LDAP_Base              OU=users,DC=ctx,DC=edu
 LDAP_Admin_User        CN=admin,OU=some,OU=folderpath,DC=ctx,DC=edu
 LDAP_Admin_PW          ******
 LDAP_Hash_Passwords    No
 LDAP_Search_as_Admin   Yes
 LDAP_Filter            mail

Is it's not found there, then try:
 LDAP_Host2              ldapserver.concordia.edu
 LDAP_Base2              OU=users,DC=concordia,DC=edu
 LDAP_Admin_User2
CN=admin,OU=some,OU=folderpath,DC=concordia,DC=edu
 LDAP_Admin_PW2          ******
 LDAP_Hash_Passwords2    No
 LDAP_Search_as_Admin2   Yes
 LDAP_Filter2            mail

--------------------

For maximum expandability, it would be cool if there was some way to
specify how many LDAP servers you wanted to try, and then have
LDAP_Host2, LDAP_Base2, ..., LDAP_Host3, LDAP_Base3, ..., attributes in
the .conf file for the number you specify.

And of course, since I don't know anything more about perl than how to
get it to search a database and write a web page, I probably just
described a whole lot more work than it's worth.

2.) I don't care about adding users to LDAP via NoCat.  In fact, I don't
want to be able to do that - it would present a little bit of a security
risk for us.

I've tried playing around with a if "($retval != 1) {then try again with
secondary attributes}" condition in the authenticate_user subroutine,
but I think I need to modify another part of Nocat to pull the
LDAP_Host2 attributes from the .conf file.  I probably also didn't
redefine $self right.  You can see what I did at
http://my.ctx.edu/dewayne.mangan/LDAP_2.txt.  And I know that I should
have put another $self->ldap->bind; at the end, but it doesn't work so
that didn't matter much.

Thanks!
 
DeWayne Mangan
ITS Infrastructure Manager
Concordia University at Austin
3400 IH 35 North
Austin, TX 78705
 
"There are only 10 types of people in this world; those who understand
binary, and those who don't."
 
--------------------------------------------------