Kuba Nowak wrote: > > Let's suppose there is an authentication module which gives > user proxy certificate (generated using certificate stored > in LDAP) as a response to valid username and password.
"Authentication module" for which service? A web server? Grid? > This proxy certificate may vary depending on the role: normal user or > admin. Are you really talking about proxy certificates? > After successful authentication Authentication to which service? > admin might > want to connect directly to LDAP server with an eye to create > new entry. The point is, to use proxy certificate as an > authorization to not force the user to use the password yet > again. If you're after what I think proxied authorization on the LDAP connection could be of help. See: http://ietfreport.isoc.org/all-ids/draft-weltman-ldapv3-proxy-13.txt Check presence of 2.16.840.1.113730.3.4.18 in attribute 'supportedControl' of your LDAP server's rootDSE to determine whether your LDAP server supports it. Ciao, Michael. -- Michael Ströder E-Mail: [EMAIL PROTECTED] http://www.stroeder.com --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
