Daniel M. wrote:

Lets say you were going to write a web application
using Perl and wanted to authenticate your users
agains the LDAP directory.  Would you use a
posixAccount entry to verify their credentials?

I think it's OT 'cause it's an ldap question. Not perl-ldap one.
in fact, your web app. can relies to the ldap authentification.

You need something like this in your slapd.conf :

access to attrs=userPassword
    by dn="cn=admin,dc=example,dc=com" write
    by anonymous auth
    by self write
    by * none

"by anonymous auth" is important.

now, you just have to
- bind as anonymous to find your user's dn
- bind again with the dn and his password

if the second bind success, so your auth success.

regards
mc

Reply via email to