Re: Keeping user roles in different realm than users

2013-09-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 9/25/13 4:52 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Keeping user roles in different realm than users > >>> Any other solutions tha

RE: Keeping user roles in different realm than users

2013-09-25 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Keeping user roles in different realm than users > > Any other solutions than writing an error-prone homegrown one that > > will allow to keep users in one realm, user roles in the other > >

Re: Keeping user roles in different realm than users

2013-09-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kamil, On 9/25/13 8:49 AM, attr wrote: > Is it possible to authenticate a user against one realm (i.e.: > LDAP) but authorize (obtain roles the user belongs to) against > another realm (i.e. database)? I'm interested in the use case, here: why woul

Re: Keeping user roles in different realm than users

2013-09-25 Thread André Warnier
attr wrote: Is it possible to authenticate a user against one realm (i.e.: LDAP) but authorize (obtain roles the user belongs to) against another realm (i.e. database)? Any other solutions than writing an error-prone homegrown one that will allow to keep users in one realm, user roles in the o

Re: Keeping user roles in different realm than users

2013-09-25 Thread Terence M. Bandoian
On 9/25/2013 7:49 AM, attr wrote: > Is it possible to authenticate a user against one realm (i.e.: LDAP) but > authorize (obtain roles the user belongs to) against another realm (i.e. > database)? > Any other solutions than writing an error-prone homegrown one that will allow > to keep users in