Difference between revisions of "stoney core: Authentication Resource Mapping (REST - LDAP)"

From stoney cloud
Jump to: navigation, search
[unchecked revision][unchecked revision]
(→‎Auth retrieval (GET))
(→‎Auth Mapping)
Line 18: Line 18:
 
! Details
 
! Details
 
|-
 
|-
−
| colspan=4 | [[stoney_core:_OpenLDAP_directory_data_organisation#Reseller_uid_.28per_Reseller.29 | Reseller uid (per Reseller)]]
+
| colspan=4 | [[stoney_core:_OpenLDAP_directory_data_organisation#People_uid_.28per_person.29 | People uid (per person) ]]
 
|-
 
|-
 
|| '''id''' || uid=4000000,ou=reseller || uid || Always read-only.
 
|| '''id''' || uid=4000000,ou=reseller || uid || Always read-only.
 
|-
 
|-
 
|| isCompany || uid=4000000,ou=reseller || sstIsCompany ||  
 
|| isCompany || uid=4000000,ou=reseller || sstIsCompany ||  
−
|-
 
−
|| isActive || uid=4000000,ou=reseller || sstIsActive ||
 
−
|-
 
−
|| resellerName || uid=4000000,ou=reseller || organizationName ||
 
−
|-
 
−
|| (none) || uid=4000000,ou=reseller || sstExternalID ||
 
−
|-
 
−
|| (none) || uid=4000000,ou=reseller || sstBelongsToResellerUID || Internally set to the same value as uid
 
 
|-
 
|-
 
|| organizationName || ou=address,uid=4000000,ou=reseller || organizationName ||
 
|| organizationName || ou=address,uid=4000000,ou=reseller || organizationName ||
 
|-
 
|-
−
| colspan=4 | [[stoney_core:_OpenLDAP_directory_data_organisation#Reseller_Billing_Address | Reseller Billing Address]]
+
| colspan=4 | [[stoney_core:_OpenLDAP_directory_data_organisation#People_Roles | People Roles ]]
 
|-
 
|-
 
|| address.gender || ou=address,uid=4000000,ou=reseller || sstGender ||  
 
|| address.gender || ou=address,uid=4000000,ou=reseller || sstGender ||  

Revision as of 15:15, 29 April 2014

Also visit stoney core: Authentication Resource - REST API.

Overview

Auth action

Auth retrieval (GET)

The following sequence describes the authentication and role retrieval:

  1. Look-up the user in the OpenLDAP directory (with a configurable service user):
    Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
    Later on, this will be a service user.
  2. If the user exists, try to bind with the users credentials.
  3. If the bind was successful, retrieve the users roles with the service user.

Auth Mapping

API Attribute LDAP Object DN LDAP Attribute Details
People uid (per person)
id uid=4000000,ou=reseller uid Always read-only.
isCompany uid=4000000,ou=reseller sstIsCompany
organizationName ou=address,uid=4000000,ou=reseller organizationName
People Roles
address.gender ou=address,uid=4000000,ou=reseller sstGender

Links

Retrieved from "http://wiki.stoney-cloud.org/mediawiki/index.php?title=stoney_core:_Authentication_Resource_Mapping_(REST_-_LDAP)&oldid=3321"