[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: getting DN from client with GSSAPI bind?

To: openldap-software@openldap.org
Subject: Re: getting DN from client with GSSAPI bind?
From: Dieter Klünter <dieter@dkluenter.de>
Date: Wed, 24 Jan 2007 14:39:36 +0100
Cc: Kenneth Rogers <kenneth.rogers@gmail.com>
Content-disposition: inline
In-reply-to: <2b53a99c0701231333t4bd92e7dw3fae3dfd00d267d2@mail.gmail.com>
References: <2b53a99c0701231333t4bd92e7dw3fae3dfd00d267d2@mail.gmail.com>
User-agent: KMail/1.8

Am Dienstag, 23. Januar 2007 22:33 schrieb Kenneth Rogers:
> Hi,
>
> After a successful GSSAPI binding, is there an easy way to get the DN
> for that user from the server?

sasl returns an authentication string something like
uid=<user>,cn=<realm>,cn=<mechanism>,cn=auth
this string can be mapped to an entry, see the authz-regexp directive in 
slapd.conf(5).

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6

Follow-Ups:
- Re: getting DN from client with GSSAPI bind?
  - From: "Kenneth Rogers" <kenneth.rogers@gmail.com>

References:
- getting DN from client with GSSAPI bind?
  - From: "Kenneth Rogers" <kenneth.rogers@gmail.com>

Prev by Date: Re: meta backend config problem
Next by Date: Re: backend-meta usage
Index(es):
- Chronological
- Thread