[ 
https://issues.apache.org/jira/browse/SHIRO-127?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12891420#action_12891420
 ] 

Philippe Laflamme commented on SHIRO-127:
-----------------------------------------

I'm glad to see progress on this issue! LDAP support out-of-the-box would be 
really good for Shiro.

I wrote the patch in January, so it probably can't be applied to trunk anymore. 
Didn't keep it up to date (sorry). Besides, I'm no LDAP expert, those comments 
from Emmanuel were quite informative. LDAP is not simple at all. For example, 
this whole DN comparison business, I had no idea! :)

I wrote the patch by looking at the Active Directory support that was already 
implemented. I had tried to keep compatibility with AD, but that's also not 
trivial to achieve (environment is harder to setup).

For some more inspiration on requirements, I suggest looking at Atlassian's 
Crowd product. Their LDAP support is obviously much more extensive than what 
Shiro needs to offer, but it provides some good use-cases for using LDAP for 
authentication (username/passwords) and authorization (providing groups/roles).

Have fun Les!

> Improvements to Shiro's LDAP support
> ------------------------------------
>
>                 Key: SHIRO-127
>                 URL: https://issues.apache.org/jira/browse/SHIRO-127
>             Project: Shiro
>          Issue Type: Improvement
>          Components: Realms 
>            Reporter: Philippe Laflamme
>         Attachments: shiro-127.patch
>
>
> Following this mailing list discussion: 
> http://n2.nabble.com/Confusion-with-the-LDAP-Realm-tp4268254p4268254.html

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to