hola,

we already have a kind of mixed mode within ldap authentification :

if ldap is on, the user always is searched within local OM database
first...
-> if he has the adminflag, he is always authenticated against local
database

it is also possible to switch off ldap without re-designing user
structure (due to the fact, that the user gets created and his entered
password is written encrypted within OM database)


-> i wouldn't recommend a mixed mode (Ldap + local auth for extern
users), cause of the overview
-> i would also recommend switching off self-registering of users when
LDAP is on...


The ldap login management is the designed for the following purpose :

Intern users are authenticated against LDAP Server, extern users can
also take part within a conference, but have to be invited via
sheduled Meeting od invitation link from within conference....

the "extern" users in this scenario don't really belong to the power
users, that should be able to create meeting appointments and
stuff....
-> if they should be ableto plan meetings, they are worth a ldap
account ;-)


if this scenario doesnt cope with your user structure, u could
consider a extension, working like :

Ldap is on
Self registering of users is on

-> if a new user (without ldap account) registers himself, a admin
user gets notified and has to "confirm" the user account by setting a
new flag within user data , indicating, that this user is to be
authenticated against local database
-> as alternative, if u dont want control about your users, the flag
could be set autmatically within self registering process....

at login process, this flag is checked first and if it exists, no
ldaop auth is used....


-> This Splitted Login mechanism should definiteley be optional, i
think, steered by configuration, maybe - cause it means a lack of
overview about the users and could even cause inconsistencies ( unique
usernames and stuff)


see ya

Smoeker





On 29 Jun., 09:07, bidab <[email protected]> wrote:
> Hi,
>
> I would use OpenMeetings in DMZ. So, in internal, users use ldap
> connection and external users don't use ldap.
>
> The problem is : it's not possible to join this 2 kind of connexion.
>
> When I use ldap connection (with ldap file) and create simple user
> from openmeetings, after I try a connection but OM says "invalid
> password".
>
> Did you try this proccess ? Is it possible to use the 2 kind of
> connection at the same time ? If not, I think it's a good idea to work
> for the next revision, isnt'it ?
>
> Bidab
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OpenMeetings User" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/openmeetings-user?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to