We do something similar to authenticate against active directory. The way we do it is 
to have a generic log in, the application logs in and searches for what in your case 
would be the namsid using the uid as a parameter. You then need to bind with the 
namsid that you've looked up and the password to determine authentication.

Ta
Matt

-----Original Message-----
From: James Black [mailto:[EMAIL PROTECTED]
Sent: 28 June 2004 21:55
To: Tomcat Users List
Subject: re: authentication with ldap after doing an ldap search


Our ldap dn is namsid=number,ou=school,o=school

The problem is that the student don't know their namsid, they know their 
uid.

I need a way for tomcat to first do a search, looking for anything where 
uid=netid (which is what the student passed in), then use that entries 
dn to bind and verify the password that was also entered.

Is there anyway to do this in Tomcat?

I have the authentication working if the person known their namsid, but 
few people will as it is used internally.

Thank you.

-- 
"Love is mutual self-giving that ends in self-recovery." Fulton Sheen
James Black    [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Any opinions expressed in this E-mail may be those of the individual and not 
necessarily the company. This E-mail and any files transmitted with it are 
confidential and solely for the use of the intended recipient. If you are not the 
intended recipient or the person responsible for delivering to the intended recipient, 
be advised that you have received this E-mail in error and that any use or copying is 
strictly prohibited. If you have received this E-mail in error please notify the 
beCogent postmaster at [EMAIL PROTECTED]
Unless expressly stated, opinions in this email are those of the individual sender and 
not beCogent Ltd. You must take full responsibility for virus checking this email and 
any attachments.
Please note that the content of this email or any of its attachments may contain data 
that falls within the scope of the Data Protection Acts and that you must ensure that 
any handling or processing of such data by you is fully compliant with the terms and 
provisions of the Data Protection Act 1984 and 1998.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to