Re: proposal for offering LDAP authentication

[Wolfgang Kaltz <jw...@yahoo.com>]

Andreas Hartmann <andreas <at> apache.org> writes:
> ...(regarding where LDAP authentication should be set)
>
> I think it should be set in ac.xconf:
> 
>    <accreditable-manager type="file">
>      <parameter name="directory"
>                 value="context:///lenya/pubs/default/config/ac/passwd"/>
> 
>      <user-manager>
>        <user-type class="o.a.l.ac.file.FileUser">Local User</user-type>
>        <user-type class="o.a.l.ac.ldap.LDAPUser">LDAP User</user-type>
>      </user-manager>
> 
>    </accreditable-manager>
> 
This is an interesting approach, as it seems to be the most flexible;
i.e. if someone needs some further type of user, it could be handled like
that also I suppose

> The flowscript should find out which user types are supported by
> the user manager and add the appropriate view parameters for its form.
> The name of the user-type could be displayed on the button.

I've been looking at the source code.
If I understand correctly, there is no flowscript for the users area
(and this is actually the only screen where we currently need to add some LDAP 
handling, because it is already in the others)
There is however, lenya/lenya/content/admin/users/users.xsp
which gets executed.

Would it make sense to try to integrate Andreas' suggestion for ac.xconf
within users.xsp, for instance to generate a list of user types which
the GUI would then support ?

If this seems like a reasonable way, I'll give it a try. What I don't
understand yet is whether the user-manager used in users.xsp would be the
same that Andreas is referring to in his ac.xconf example, or is this 
something else ?




---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org