Sorry for the late response, your message got store in a wrong folder on 
my server...

I can follow your argumentation and I agree (by 98% ;-)). Nevertheless I 
create base entries 'manually' and use PLA to populate/manage them.
The new option 'hide_noaccess_base' set to true will do exactly what I 
need: mask the base entries to which the user logged in has no access - 
many thanks!

regards Felix

On 20.05.2011 15:54, Deon George wrote:
> Actually, bind_id is only to help find your DN - when you are specifying
> an attribute based login. (Since LDAP servers only allow authentication
> via a DN, we need a way to find your DN (which is friendlier) -
> especially if your LDAP server doesnt allow anonymous queries (or the
> attribute you are logging in with isnt available via an anonymous query)).
>
> I think it should be nice to not show base entries, if they appear to
> not exist to a user who is logged in - however, its a trade off over
> using PLA to create base entries, for a new setup. (Since those bases
> dont exist, and you may want to use PLA to create them - PLA has no idea
> that you are a privileged LDAP user who would want to create them.)
>
> Anyway, in writing this email, I implemented a server configuration
> server,hide_noaccess_base, which if set to true (the default is false),
> will hide base DNs that are not accessible, instead of showing the
> create dialogue.
>
> See git commit #ddb5ed0
>
> ...deon
>
> On 19/05/11 18:08, Felix Brack (Mailinglist) wrote:
>> However allowing read access to everything and/or everyone connecting
>> from local host is not really a very sophisticated solution. If I had
>> only one database I could use the settings
>>
>> $servers->setValue('login','bind_id','uid=phpldap,dc=aa,dc=ch');
>> $servers->setValue('login','bind_pass','secret');
>>
>> for access, correct? But how do I do this if I have more then one
>> database, 3 in my case? I would be in need of an array that allows login
>> to 'dc=aa,dc=ch', 'dc=bb,dc=ch' and 'dc=cc,dc=ch'. I guess this is not
>> possible with the current release of phpLDAPadmin.
>>
>> regards Felix
>
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> phpldapadmin-users mailing list
> phpldapadmin-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/phpldapadmin-users

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
phpldapadmin-users mailing list
phpldapadmin-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/phpldapadmin-users

Reply via email to