[ http://issues.apache.org/jira/browse/JS2-470?page=all ]
Davy De Waele updated JS2-470:
------------------------------
Attachment: security.patch
> LDAP Authorization Support Implementation + Sun LDAP Authentication Support
> ---------------------------------------------------------------------------
>
> Key: JS2-470
> URL: http://issues.apache.org/jira/browse/JS2-470
> Project: Jetspeed 2
> Type: Improvement
> Components: Security
> Versions: 2.1-dev
> Reporter: David Le Strat
> Assignee: David Le Strat
> Fix For: 2.1-dev
> Attachments: security.patch
>
> This is an issue to track an enhancements provided by Davy De Waele (nicely
> welcome list of changes ;)). Davy will include the code patch for this
> issue. I will apply the changes to svn after review. Here is a list of the
> changes performed:
> Changed LDAP authentication
> ---------------------------
> Instead of verifying the username/password combination by fetching the
> password from the LDAP attribute, an LDAP bind is performed with the
> provided credentials to see if the user is authenticated. Jetspeed
> shouldn't be aware of how to decode an encoded password stored in LDAP.
> (It should however, as is currently the case, be able to encode a
> password in the LDAP server, in the case that the LDAP server doesn't
> do
> this automatically).
> Implemented User-Group assignment
> ---------------------------------
> Groups can be assigned/unassigned to users via the LdapSecurityMapper.
> (Via the j2-group attribute on the user entry)
> Implemented User-Role assignment
> --------------------------------
> Roles can be assigned/unassigned to users via the LdapSecurityMapper.
> (Via the j2-role attribute on the user entry)
> Implemented Group-Role assignment
> ---------------------------------
> Groups can be assigned/unassigned to roles via the LdapSecurityMapper.
> (Via the j2-role attribute on the group entry)
> Supported LDAP Servers
> ----------------------
> Implementation has been tested on OpenLDAP,Sun Directory Server and
> Apache Directory Server. Documentation can be provided on how to setup
> these LDAP servers for integrating with Jetspeed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
