Is there any standard for authentication with LDAP? or we just set a
tree of users and keep the passwords as their attribute and search for
them?
While you could do it that way, I believe it is more common
to just bind to the LDAP using the credentials provided by
the user. If the bind succeeds, that's your authentication
(don't forget to release the connection when you're done).
If the bind fails, check the return codes for why. The LDAP
will tell you why it didn't work, i.e. no such user,
password mismatch, etc. Although for best security
practices, your application shouldn't tell the user that,
just give them a go/no-go.
...BC
--
+-------------------------[ [EMAIL PROTECTED] ]---+
| Bill Costa | No good
| 1 Leavitt Lane Voice: | deed...
| CIS/Telecom -- 2nd Floor +1-603-862-3056 |
| University of New Hampshire | Goes
| Durham, NH 03824 USA | unpunished.
+---------------[ http://pubpages.unh.edu/~wfc/ ]--+
---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
