Difference between revisions of "stoney core: Authentication Resource Mapping (REST - LDAP)"
From stoney cloud
[unchecked revision] | [unchecked revision] |
(→Auth Retrieval (GET) Mapping) |
(→Auth Retrieval (GET) Mapping) |
||
Line 23: | Line 23: | ||
|- | |- | ||
|| user || uid=4000002,ou=people,dc=stoney-cloud,dc=org || mail || | || user || uid=4000002,ou=people,dc=stoney-cloud,dc=org || mail || | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
|- | |- | ||
Revision as of 13:44, 1 May 2014
Also visit stoney core: Authentication Resource - REST API.
Contents
Overview
Auth Action
Auth Retrieval (GET)
The following sequence describes the authentication and role retrieval:
- Look-up the user in the OpenLDAP directory (with a configurable service user):
- Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
- Later on, this will be a service user.
- If the user exists, try to bind with the users credentials.
- If the bind was successful, retrieve the users roles with the service user.
Auth Retrieval (GET) Mapping
API Attribute | LDAP Object DN | LDAP Attribute | Details |
---|---|---|---|
People uid (per person) | |||
id | uid=4000002,ou=people,dc=stoney-cloud,dc=org | uid | Always read-only. |
user | uid=4000002,ou=people,dc=stoney-cloud,dc=org |