Hello all,
I have this small query.
I need to authenticate certain users from ldap server. in our case there is
soap base service for ldap authentication. we have users with specific
emails that need to be checked through ldap if username doesnot have that
email part he/she need to be authenticated via invenio.
I haven't gone through the details on ldap authentication mechanism within
invenio but going through surface i am not sure default invenio's ldap
mechanism will fulfill our requirements.
So these two thinks came into my mind.
1. Extending invenio's ldap authentication:
If i have to extend this feature how and where i have to change.
2. Hooking invenio login mechanism:
Here what i can do is check user for specific pattern and call the
soap service if service returns ok don't go through verfying password just
login user [ i believe user need to exists on invenio system also, for that
i have to create user for firstimers as well. ], set necessary variables
such as userid, session etc.
How can i create a separate module without changing the core invenio
[ if this is possible ] so we can later contribute the code [ we have been
thinking releasing our changes for some time ] without breaking the system.
Note: I am good on python and have been working on invenio for almost a
year so details wont hurt.
Thank you,
Diwaker
Nepal
[ working for : himaldoc.icimod.org ]
