A page in your DokuWiki was added or changed. Here are the details:

Date        : 2011/08/26 14:47
Browser     : Mozilla/5.0 (X11; Linux i686; rv:6.0) Gecko/20100101 Firefox/6.0
IP-Address  : 213.41.232.151
Hostname    : dslm0.nerim.lyon.linagora.net
Old Revision: none
New Revision: http://ltb-project.org/wiki/documentation/general/sasl_delegation
Edit Summary: created
User        : coudot

====== Pass-Trough authentication with SASL ======

===== Presentation =====

Pass-Trough authentication is a mechanism used by some LDAP directories to 
delegate authentication operations (BIND) to other backends.

It should be distinguished from the external authentication methods, that are 
managed by the LDAP client to authenticate on a trusted source and then connect 
to the directory.

Pass-Trough authentication is purely transparent for LDAP clients, as they send 
standard authentication operations to the LDAP directory, which will then 
handle the delegation and forward the response to the client, as the 
authentication was done locally.

A real world use case is the coexistence between OpenLDAP and Active Directory: 
on choice can be to let the password into AD, and configure a pass-trough 
authentication between OpenLDAP and AD. With this setup, authentications done 
on the OpenLDPA part will use the AD password.




-- 
This mail was generated by DokuWiki at
http://ltb-project.org/wiki/

_______________________________________________
ltb-changes mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-changes

Reply via email to