Hi,

I was wondering If I could get some feedback on the attached file labeled
"Cloudstack-LDAP.pdf". It outlines a design document for the project
labeled "LDAP user provisioning"

>From my current understanding of the single sign on mechanism implemented
in cloudstack a LDAP user must be created manually within the cloudstack
database. Would it be preferred to:

A) Create a service that polls LDAP every so often to check for new user
creation.
or
B) Extend the login page to check LDAP after failing to find a user within
the cloudstack database. On success of finding a user in LDAP a profile
would automatically be created within the cloudstack database.

Kind regards,
Ian

Reply via email to