LDAP Authorization Support Implementation + Sun LDAP Authentication Support
---------------------------------------------------------------------------

         Key: JS2-470
         URL: http://issues.apache.org/jira/browse/JS2-470
     Project: Jetspeed 2
        Type: Improvement
  Components: Security  
    Versions: 2.1-dev    
    Reporter: David Le Strat
 Assigned to: David Le Strat 
     Fix For: 2.1-dev


This is an issue to track an enhancements provided by Davy De Waele (nicely 
welcome list of changes ;)).  Davy will include the code patch for this issue.  
I will apply the changes to svn after review.  Here is a list of the changes 
performed:

Changed LDAP authentication
---------------------------
Instead of verifying the username/password combination by fetching the
password from the LDAP attribute, an LDAP bind is performed with the
provided credentials to see if the user is authenticated. Jetspeed
shouldn't be aware of how to decode an encoded password stored in LDAP.
(It should however, as is currently the case, be able to encode a
password in the LDAP server, in the case that the LDAP server doesn't 
do
this automatically).

Implemented User-Group assignment
---------------------------------
Groups can be assigned/unassigned to users via the LdapSecurityMapper.
(Via the j2-group attribute on the user entry)

Implemented User-Role assignment
--------------------------------
Roles can be assigned/unassigned to users via the LdapSecurityMapper.
(Via the j2-role attribute on the user entry)

Implemented Group-Role assignment
---------------------------------
Groups can be assigned/unassigned to roles via the LdapSecurityMapper.
(Via the j2-role attribute on the group entry)

Supported LDAP Servers
----------------------
Implementation has been tested on OpenLDAP,Sun Directory Server and
Apache Directory Server. Documentation can be provided on how to setup
these LDAP servers for integrating with Jetspeed.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to