List Info

Thread: RE: New auth stuff and LDAP store...




RE: New auth stuff and LDAP store...
country flaguser name
United States
2007-09-24 09:55:19
Here's what's working for me:


authentication:
   default_realm: users
   realms:
      users:
         credential:
            class: 'Password'
            password_type: 'self_check'

         store:      
            class: LDAP::Backend
            ldap_server: 'ldap://localhost:389'
            user_basedn: 'dc=birdwebdev,dc=dnsalias,dc=org'
            binddn:
'cn=admin,dc=birdwebdev,dc=dnsalias,dc=org'
            bindpw: 'xxxxx'


Note in particular the store class name.

FWIW, I'm using OpenLDAP.

- Alan


> -----Original Message-----
> From: Peter Karman [mailto:peterpeknet.com]
> Sent: Monday, September 24, 2007 7:33 AM
> To: The elegant MVC web framework
> Subject: Re: [Catalyst] New auth stuff and LDAP
store...
> 
> 
> 
> On 07/21/2007 10:02 PM, Jay K wrote:
> > For the benefit of the list:
> >
> > This issue has been resolved.  It turned out to be
a disagreement
> > between what C::P::Authenticaiton was trying to
place in $user->store
> > () and what LDAP was trying to place in
$user->store()
> >
> > LDAP was correct, and C::P::Authentication should
keep it's grubby
> > little hands off of $user->store() - I am
pushing a maintenance
> > release of C::P::Authentication to CPAN now. 
Should be available
> > from CPAN in a few hours.
> >
> 
> I am now trying to use ::Store::LDAP 0.04 with
::Authentication 0.10002
> and I
> cannot seem to get the config right. I just asked about
this on
> #catalyst and
> was advised to use the older pre-0.1 base
Authentication plugin.
> 
> I have a feeling I'm just not getting the config right.
But if it is is
> more
> systemic than that, and the LDAP plugins need some help
getting up to
> the
> latest Authentication API, I have tuits to spend on it
and would gladly
> contribute code/tests/docs if I was told those were
needed, and given a
> pointer
> to where to start.
> 
> TIA
> 
> --
> Peter Karman  .  peterpeknet.com  .  http://peknet.com/
> 
> 
> _______________________________________________
> List: Catalystlists.rawmode.org
> Listinfo: ht
tp://lists.rawmode.org/mailman/listinfo/catalyst
> Searchable archive: http://www.mail-
> archive.com/catalystlists.rawmode.org/
> Dev site: http://dev.catalyst.per
l.org/


_______________________________________________
List: Catalystlists.rawmode.org
Listinfo: ht
tp://lists.rawmode.org/mailman/listinfo/catalyst
Searchable archive: http://www.mail-
archive.com/catalystlists.rawmode.org/
Dev site: http://dev.catalyst.per
l.org/

RE: New auth stuff and LDAP store...
country flaguser name
United States
2007-09-24 11:55:26

On 09/24/2007 09:55 AM, Alan Humphrey wrote:
> Here's what's working for me:
> 
> 
> authentication:
>    default_realm: users
>    realms:
>       users:
>          credential:
>             class: 'Password'
>             password_type: 'self_check'
> 
>          store:      
>             class: LDAP::Backend
>             ldap_server: 'ldap://localhost:389'
>             user_basedn:
'dc=birdwebdev,dc=dnsalias,dc=org'
>             binddn:
'cn=admin,dc=birdwebdev,dc=dnsalias,dc=org'
>             bindpw: 'xxxxx'
> 
> 
> Note in particular the store class name.
> 
> FWIW, I'm using OpenLDAP.
> 

Thanks. That works. I'm using OpenLDAP too.

However, I'm concerned about a few things.

(1) the LDAP documentation is wrong.
(2) in grokking the Authentication.pm code, I see that the
LDAP modules are
still working by virtue of a lot of code labeled 'BACKWARDS
COMPATABILITY' and
'old-style' and warnings about the interface eventually
disappearing. These
include get_user() instead of the newer find_user() et al.

As I have the time (and who knows how long that will
last...), I'd still like
to bring the LDAP plugins up to speed. I'll hack on it a bit
today and see
where I get.

-- 
Peter Karman  .  peterpeknet.com  .  http://peknet.com/


_______________________________________________
List: Catalystlists.rawmode.org
Listinfo: ht
tp://lists.rawmode.org/mailman/listinfo/catalyst
Searchable archive: http://www.mail-
archive.com/catalystlists.rawmode.org/
Dev site: http://dev.catalyst.per
l.org/

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )