https://bz.apache.org/bugzilla/show_bug.cgi?id=65945

--- Comment #8 from Chris Lott <[email protected]> ---
hi RĂ¼diger thanks for the links to code, I'll try to understand how that works.

I'm glad to provide a (sanitized) LDAP user entry, here's the structure we use:

dn: uid=tr01,ou=users,dc=myproject
objectClass: inetOrgPerson
uid: tr01
cn: Todd
sn: Rundgren

The LDIF file puts good old Todd Rundgren (and others) into a group like this:

dn: cn=my-user-group,ou=groups,dc=myproject
objectClass: groupOfUniqueNames
cn: my-user-group
uniqueMember: uid=tr01,ou=users,dc=myproject

So I was able to name attributes cn and sn in the AuthLDAPURL and use
environment variables AUTHORIZE_cn and AUTHORIZE_sn to pass on Todd's first and
last names over to our back-end server.

I suppose I could add an entry "groups" or something into Todd's user entry and
pass that attribute along, but that feels like a brutal hack, I'm not happy
about adding redundant information.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to