Re: [Sheflug] PHP, LDAP and authentication

[Matthew Palmer <nospam [at] ieee.uow.edu.au>]

On Tue, 24 Apr 2001, [iso-8859-1] José Luis Gómez Dans wrote:

> 	Does anyone have any thoughts on how to authenticate someone
> with LDAP and PHP? I haven't got a clue on LDAP, but I have read about
> it being used in this guise, and was wondering whether that is possible
> (and realistic).

Yup, can be done, in a great many different ways.

First, bind to any DN with a properly formatted userPassword attribute, and
if the passwords match you've got a winner (ie an authenticated user).

Alternately, you can use the LDAP system a bit like an ordinary DB, and
store passwords (encrypted in some way, preferably) in any attribute you
like, and get the attribute out and do some sort of comparison.

I'd elaborate, provide code, etc, but I have my preferred arm in a sling,
and I can't type real well one-handed (I knew I shound have tried "those"
IRC channels).


-- 
-----------------------------------------------------------------------
#include <disclaimer.h>
Matthew Palmer
mjp16@ieee.uow.edu.au

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.