Re: LDAP storing web accounts...

2005-12-08 Thread Marc Chantreux
Daniel M. wrote: Lets say you were going to write a web application using Perl and wanted to authenticate your users agains the LDAP directory. Would you use a posixAccount entry to verify their credentials? I think it's OT 'cause it's an ldap question. Not perl-ldap one. in fact, your web ap

Re: LDAP storing web accounts...

2005-12-08 Thread Quanah Gibson-Mount
--On Friday, December 09, 2005 3:28 PM +1300 Gerry Smyth <[EMAIL PROTECTED]> wrote: Hi Daniel, One thought could be to use Kerberos V for authentication and use LDAP for authorisation tied in with pam (all on Linux of course). Your web application say assuming php is used would call the pa

Re: LDAP storing web accounts...

2005-12-08 Thread Gerry Smyth
Hi Daniel, One thought could be to use Kerberos V for authentication and use LDAP for authorisation tied in with pam (all on Linux of course). Your web application say assuming php is used would call the pam_auth module, which interrogates Kerberos. In this way, your web app is loosely coupled

Re: LDAP storing web accounts...

2005-12-08 Thread Marc Chantreux
Hi, I think you're off topic. I also think you need to look at posix.schema, there is a posixAccount object with userPassword and uid attributes there. regards mc

LDAP storing web accounts...

2005-12-08 Thread Daniel M.
Problem: Given an application that stores users accounts in a database table as "user" and "password" (encrypted of course) what would be the best way to convert this app to use LDAP. Do I store the login and password in the LDAP directory as attributes to a DN such as: cn=john.doe,cn=webUsers