You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Robert Munn (JIRA)" <se...@james.apache.org> on 2015/03/05 10:37:38 UTC
[jira] [Updated] (JAMES-1569) LDAP group authentication filter to
authenticate users by LDAP group
[ https://issues.apache.org/jira/browse/JAMES-1569?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Munn updated JAMES-1569:
-------------------------------
Attachment: james-ldap-patch.txt
Patch to filter LDAP authentication by additional criteria through a filter attribute in xml config.
> LDAP group authentication filter to authenticate users by LDAP group
> --------------------------------------------------------------------
>
> Key: JAMES-1569
> URL: https://issues.apache.org/jira/browse/JAMES-1569
> Project: James Server
> Issue Type: Improvement
> Affects Versions: 3.0.0-beta5
> Environment: issue is not platform dependent.
> Reporter: Robert Munn
> Priority: Minor
> Fix For: 3.0-beta4, 3.0.0-beta5
>
> Attachments: james-ldap-patch.txt
>
>
> I created a small filter in the LDAP authentication system to allow user authentication to be filtered by additional criteria in a filter attribute of the repository in the xml config.
> <repository name="LocalUsers" class="org.apache.james.user.ldap.ReadOnlyUsersLDAPRepository" ldapHost="<host>" principal="<authuser>" credentials="<password>" userBase="<ou>" userObjectClass="<object class, e.g. inetOrgPerson>" userIdAttribute="<userid attribute name, e.g. cn>" filter="(<filter>)">
> example:
> <repository name="LocalUsers" class="org.apache.james.user.ldap.ReadOnlyUsersLDAPRepository" ldapHost="ldaps://mail.domain.com:636" principal="cn=admin,dc=domain,dc=com" credentials="password" userBase="ou=people,dc=domain,dc=com" userObjectClass="inetOrgPerson" userIdAttribute="cn" filter="(memberOf=CN=EmailUsers,ou=groups,DC=domain,DC=com)">
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org