Hi,

Roberto's email a few minutes made me consider another feature I'd
find very useful at least for my environment.

Consider an environment with a centralized user authentication
and authorization system. This might be an LDAP directory or
something completely different. As this may be different for every
location, I'd like to use an external program (shell script...) to
perform the necessary operations.

What I would like to do is:

On the RA:
- have a login prompt and request username/password
- call an external program and pass the values entered by the user.
  In the external call I include a fixed role against the user is
  to verified against.
- if the program returns success, the login is successful


On the public frontend I'd like to implement this
- have a login prompt and request username/password
- call an external program and pass the values entered by the user.
  Any user is accepted here, regardless of his role in the system.
- if the program returns success, the login is successful
- in addition to this, the entered username is used to determine
  user details, such as department and full name
- this additional information should be *included* in any CSR or
  CSR the user enters. The user should ideally have no way of
  altering this information.

What do you think?

cheers

Martin



-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to