ldap verification for passwords

From: Douglas B. Jones <douglas_at_gpc.peachnet.edu>
Date: Tue, 10 Oct 2000 16:08:25 -0400

Hi,

Is it possible to have password authentication be done via
ldap instead of the standard Tru64 (4.0f or 5.x) method
for BSD or C2 mode. Or, if the changing of a password would
also update ldap and maybe any other files, such as a dbm
file for apache authentication. Apache does have an ldap module,
but it is not very well supported and is for an earlier version
of apache, so I am a little worried about it.

Right now I am using a front/back end to the password command. Ie:
I have the user run my password command that then runs the system
one and then mine will change ldap and the dbm file(s) putting
the encrypted one in there is there is a change from the encrypted
string before calling the system password command. Sure would be
nice if there was simply a system call for changing the password.
Such as:

s = gettheapsswordfromtheuser();
ret = sys_password(s);

s would not be encrypted, but 'sys_password()' would encrypted
it according to the system standard and then add it to the appropriate
dbs. Of course, if you are doing a lot of ids at once, you might have:

sys_openpassword(); /* make ptmp or return error if ptmp exist */
for (i = 0; i < ntoset; i++) {
        sys_password_upd(s[i]);
}
sys_closepassword(); /* this would close ptmp, mkpasswd, mv to /etc/passwd */

making 'sys_password()' just a wrapper for the open/upd/close calls....

Just an idea, but anyway my question is actually about ldap authentication
for the user login and password.

Thanks for any help,
Cheers,
Douglas
Received on Tue Oct 10 2000 - 20:07:28 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:41 NZDT