Difference between revisions of "stoney core: Authentication Resource Mapping (REST - LDAP)"

From stoney cloud
Jump to: navigation, search
[unchecked revision][unchecked revision]
(Auth Retrieval (GET))
(Auth Retrieval (GET))
Line 7: Line 7:
 
# Look-up the user in the OpenLDAP directory (with a configurable LDAP service user):
 
# Look-up the user in the OpenLDAP directory (with a configurable LDAP service user):
 
#: Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
 
#: Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
#: Later on, this will be a [[stoney_core:_OpenLDAP_directory_data_organisation#Services | service user]].
+
#: Later on, this will be a [[stoney_core:_OpenLDAP_directory_data_organisation#Services | LDAP service user]].
 
# If the user exists, try to bind with the [[stoney_core:_OpenLDAP_directory_data_organisation#People_uid_.28per_person.29 | users credentials]].
 
# If the user exists, try to bind with the [[stoney_core:_OpenLDAP_directory_data_organisation#People_uid_.28per_person.29 | users credentials]].
 
# If the bind was successful, retrieve further information with the LDAP service user.
 
# If the bind was successful, retrieve further information with the LDAP service user.

Revision as of 13:52, 1 May 2014

Also visit stoney core: Authentication Resource - REST API.

Overview

Auth Action

Auth Retrieval (GET)

The following sequence describes the authentication and role retrieval:

  1. Look-up the user in the OpenLDAP directory (with a configurable LDAP service user):
    Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
    Later on, this will be a LDAP service user.
  2. If the user exists, try to bind with the users credentials.
  3. If the bind was successful, retrieve further information with the LDAP service user.

Auth Retrieval (GET) Mapping

API Attribute LDAP Object DN LDAP Attribute Details
People uid (per person)
id uid=4000002,ou=people,dc=stoney-cloud,dc=org uid Always read-only.
user uid=4000002,ou=people,dc=stoney-cloud,dc=org mail

Links