Re: [Catalyst] LDAP question

2012-05-22 Thread Tomas Doran
On 21 May 2012, at 17:12, Kenneth S Mclane wrote: I'm going to post this up here to avoid those quoting issues. I'm x'ing out my password for obvious reasons. You missed out the app boot, and the initial bind / search… Which are the bits I think are going wrong. Also, I think my bad -

Re: [Catalyst] LDAP question

2012-05-22 Thread Tomas Doran
On 21 May 2012, at 22:24, Kenneth S Mclane wrote: So I should leave it as self_check? No. You set it as plain / don't set it at all, as the password needs to be passed through Catalyst un-mangled - as the auth is done by logging in _as the user_ (and therefore with their password) in LDAP.

Re: [Catalyst] LDAP question

2012-05-22 Thread Kenneth S Mclane
to match your filter setting. Thanks for all the help. Tomas Doran bobtf...@bobtfish.net wrote on 05/22/2012 05:27:04 AM: From: Tomas Doran bobtf...@bobtfish.net To: The elegant MVC web framework catalyst@lists.scsys.co.uk Date: 05/22/2012 05:27 AM Subject: Re: [Catalyst] LDAP

[Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
I am continuing on my journey to duplicate a web app for administering a db. I have all my pages up and running, as well as search functionality. I decided to attack authentication next. I am using a php pages from a different web app to get the settings for our LDAP server. //Connect to ldap

Re: [Catalyst] LDAP question

2012-05-21 Thread Tomas Doran
On 21 May 2012, at 15:20, Kenneth S Mclane wrote: I am continuing on my journey to duplicate a web app for administering a db. I have all my pages up and running, as well as search functionality. I decided to attack authentication next. I am using a php pages from a different web app to

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
From: Tomas Doran bobtf...@bobtfish.net To: The elegant MVC web framework catalyst@lists.scsys.co.uk Date: 05/21/2012 09:47 AM Subject: Re: [Catalyst] LDAP question On 21 May 2012, at 15:20, Kenneth S Mclane wrote: I am continuing on my journey to duplicate a web app for administering a db

Re: [Catalyst] LDAP question

2012-05-21 Thread Robert Wohlfarth
On Mon, May 21, 2012 at 9:20 AM, Kenneth S Mclane ksmcl...@us.ibm.comwrote: They are apparently doing the initial bind with the credentials submitted by the user, I am getting invalid credentials the way I have it above, if I change it to anonymous I get a LDAP Error while searching for user:

Re: [Catalyst] LDAP question

2012-05-21 Thread Tomas Doran
On 21 May 2012, at 16:42, Robert Wohlfarth wrote: On Mon, May 21, 2012 at 9:20 AM, Kenneth S Mclane ksmcl...@us.ibm.com wrote: They are apparently doing the initial bind with the credentials submitted by the user, I am getting invalid credentials the way I have it above, if I change it to

Re: [Catalyst] LDAP question

2012-05-21 Thread Tomas Doran
Your quoting and HTML mail settings are really broken! You are not quoting anyone else's email, but just changing it's font - which means that anyone using a text mail client without fonts can't see the quoting.. On 21 May 2012, at 16:18, Kenneth S Mclane wrote: You can turn on LDAP debugging

Re: [Catalyst] LDAP question

2012-05-21 Thread Luis Muñoz
On May 21, 2012, at 11:42 AM, Robert Wohlfarth wrote: The standard Catalyst::Authentication::Store::LDAP does not work with this model. I've been told that the right way to do authentication against LDAP is * bind with a read-only set of credentials * Lookup the user's entry (here is where

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
10:57 AM Subject: Re: [Catalyst] LDAP question On 21 May 2012, at 16:42, Robert Wohlfarth wrote: On Mon, May 21, 2012 at 9:20 AM, Kenneth S Mclane ksmcl...@us.ibm.com wrote: They are apparently doing the initial bind with the credentials submitted by the user, I am getting invalid

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
I must apologize for my companies insistence on using Lotus Notes as a mail client, they are kind of stuck on it since they made it.___ List: Catalyst@lists.scsys.co.uk Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst Searchable

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
-Length: 20384 [info] Request took 0.186364s (5.366/s) Needless to say these are valid credentials. From: Tomas Doran bobtf...@bobtfish.net To: The elegant MVC web framework catalyst@lists.scsys.co.uk Date: 05/21/2012 11:01 AM Subject: Re: [Catalyst] LDAP question Your quoting and HTML mail

Re: [Catalyst] LDAP question

2012-05-21 Thread Robert Wohlfarth
On Mon, May 21, 2012 at 11:03 AM, Luis Muñoz luisemu...@gmail.com wrote: On May 21, 2012, at 11:42 AM, Robert Wohlfarth wrote: The standard Catalyst::Authentication::Store::LDAP does not work with this model. I've been told that the right way to do authentication against LDAP is * bind

Re: [Catalyst] LDAP question

2012-05-21 Thread Luis Muñoz
On May 21, 2012, at 12:02 PM, Kenneth S Mclane wrote: I have no control over the LDAP server, How would I change things so the submitted username and password would be inserted as the credentials to be used as the initial bind? You use that from the client. Below is a snippet from a

Re: [Catalyst] LDAP question

2012-05-21 Thread Len Jaffe
On Mon, May 21, 2012 at 12:05 PM, Kenneth S Mclane ksmcl...@us.ibm.comwrote: I must apologize for my companies insistence on using Lotus Notes as a mail client, they are kind of stuck on it since they made it. I use it at work too, and despite the insistence on top posting everything, iours

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
Ok, found it. Thanks, I hate this program so much I give up shortly after trying to figure it out. ;-) Len Jaffe lenja...@jaffesystems.com wrote on 05/21/2012 11:40:06 AM: On Mon, May 21, 2012 at 12:05 PM, Kenneth S Mclane ksmcl...@us.ibm.com wrote: I must apologize for my companies

Re: [Catalyst] LDAP question

2012-05-21 Thread Len Jaffe
On Mon, May 21, 2012 at 12:46 PM, Kenneth S Mclane ksmcl...@us.ibm.comwrote: Ok, found it. Thanks, I hate this program so much I give up shortly after trying to figure it out. ;-) It takes a village. -- lenja...@jaffesystems.com 614-404-4214 www.volunteerable.net - minimally viable and

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
have a wire crossed somewhere. Any ideas? Luis Muñoz luisemu...@gmail.com wrote on 05/21/2012 11:18:48 AM: From: Luis Muñoz luisemu...@gmail.com To: The elegant MVC web framework catalyst@lists.scsys.co.uk Date: 05/21/2012 11:20 AM Subject: Re: [Catalyst] LDAP question

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
Subject: Re: [Catalyst] LDAP question ok, making progress, I am getting all the data back in the return hash, however, I get the error: Unable to locate user matching user info provided in realm: ldap and get redirected back to the login page. I built this using some examples from

Re: [Catalyst] LDAP question

2012-05-21 Thread Luis Muñoz
On May 21, 2012, at 5:12 PM, Kenneth S Mclane wrote: I'm getting closer. I'm wondering if I need to find out what form they are encrypting the password in? It defaults to SHA-1, but I do not know if that is correct. You do not need that because you're not dealing with the hashes directly.

Re: [Catalyst] LDAP question

2012-05-21 Thread Kenneth S Mclane
-- Alfred Hitchcock Luis Muñoz luisemu...@gmail.com wrote on 05/21/2012 04:21:07 PM: From: Luis Muñoz luisemu...@gmail.com To: The elegant MVC web framework catalyst@lists.scsys.co.uk Date: 05/21/2012 04:21 PM Subject: Re: [Catalyst] LDAP question On May 21, 2012