re: authentication with ldap after doing an ldap search

2004-06-28 Thread James Black
Our ldap dn is namsid=number,ou=school,o=school
The problem is that the student don't know their namsid, they know their 
uid.

I need a way for tomcat to first do a search, looking for anything where 
uid=netid (which is what the student passed in), then use that entries 
dn to bind and verify the password that was also entered.

Is there anyway to do this in Tomcat?
I have the authentication working if the person known their namsid, but 
few people will as it is used internally.

Thank you.
--
Love is mutual self-giving that ends in self-recovery. Fulton Sheen
James Black[EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: authentication with ldap after doing an ldap search

2004-06-28 Thread Dale, Matt

We do something similar to authenticate against active directory. The way we do it is 
to have a generic log in, the application logs in and searches for what in your case 
would be the namsid using the uid as a parameter. You then need to bind with the 
namsid that you've looked up and the password to determine authentication.

Ta
Matt

-Original Message-
From: James Black [mailto:[EMAIL PROTECTED]
Sent: 28 June 2004 21:55
To: Tomcat Users List
Subject: re: authentication with ldap after doing an ldap search


Our ldap dn is namsid=number,ou=school,o=school

The problem is that the student don't know their namsid, they know their 
uid.

I need a way for tomcat to first do a search, looking for anything where 
uid=netid (which is what the student passed in), then use that entries 
dn to bind and verify the password that was also entered.

Is there anyway to do this in Tomcat?

I have the authentication working if the person known their namsid, but 
few people will as it is used internally.

Thank you.

-- 
Love is mutual self-giving that ends in self-recovery. Fulton Sheen
James Black[EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Any opinions expressed in this E-mail may be those of the individual and not 
necessarily the company. This E-mail and any files transmitted with it are 
confidential and solely for the use of the intended recipient. If you are not the 
intended recipient or the person responsible for delivering to the intended recipient, 
be advised that you have received this E-mail in error and that any use or copying is 
strictly prohibited. If you have received this E-mail in error please notify the 
beCogent postmaster at [EMAIL PROTECTED]
Unless expressly stated, opinions in this email are those of the individual sender and 
not beCogent Ltd. You must take full responsibility for virus checking this email and 
any attachments.
Please note that the content of this email or any of its attachments may contain data 
that falls within the scope of the Data Protection Acts and that you must ensure that 
any handling or processing of such data by you is fully compliant with the terms and 
provisions of the Data Protection Act 1984 and 1998.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: authentication with ldap after doing an ldap search

2004-06-28 Thread James Black
Thank you for the response.

We have it working for php and jsp pages, but I am trying to use it with
webdav, actually. My hope is to have a method that will allow people to log
in to make changes to files, but anyone, currently, can read the files. I
also have it where certain roles are needed for updates.

I am now starting to look at slide, but I think I will face the same basic
problem, due to our ldap schema.

 Work like you don't need the money, love like you've never been hurt, and
dance like no one is watching. 
--- Satchel Paige 
 -Original Message-
 From: Dale, Matt [mailto:[EMAIL PROTECTED]
 Sent: Monday, June 28, 2004 5:01 PM
 To: Tomcat Users List; [EMAIL PROTECTED]
 Subject: RE: authentication with ldap after doing an ldap search
 
 
 We do something similar to authenticate against active directory. The way
 we do it is to have a generic log in, the application logs in and searches
 for what in your case would be the namsid using the uid as a parameter.
 You then need to bind with the namsid that you've looked up and the
 password to determine authentication.
 
 Ta
 Matt
 
 -Original Message-
 From: James Black [mailto:[EMAIL PROTECTED]
 Sent: 28 June 2004 21:55
 To: Tomcat Users List
 Subject: re: authentication with ldap after doing an ldap search
 
 
 Our ldap dn is namsid=number,ou=school,o=school
 
 The problem is that the student don't know their namsid, they know their
 uid.
 
 I need a way for tomcat to first do a search, looking for anything where
 uid=netid (which is what the student passed in), then use that entries
 dn to bind and verify the password that was also entered.
 
 Is there anyway to do this in Tomcat?
 
 I have the authentication working if the person known their namsid, but
 few people will as it is used internally.
 
 Thank you.
 
 --
 Love is mutual self-giving that ends in self-recovery. Fulton Sheen
 James Black[EMAIL PROTECTED]
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]