Difference between revisions of "stoney core: Authentication Resource Mapping (REST - LDAP)"

From stoney cloud
Jump to: navigation, search
[unchecked revision][unchecked revision]
(→‎Auth retrieval (GET))
(→‎Auth Retrieval (GET))
 
(21 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
Also visit [[stoney core: Authentication Resource - REST API]].
 
= Overview =
 
= Overview =
  
−
= Auth action =
+
= Auth Action =
−
== Auth retrieval (GET) ==
+
== Auth Retrieval (GET) ==
−
The following sequence describe the authentication and role retrieval:
+
The following sequence describes the authentication retrieval:
−
# Look-up the user in the OpenLDAP directory (with a configurable user:
+
# Look-up the user in the OpenLDAP directory in the ou=people,dc=stoney-cloud,dc=org sub tree (with a configurable LDAP service user):
−
#: Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
+
#: filter: <code>(mail=name.surname@example.com)</code>
−
#: Later on, this will be a [[stoney_core:_OpenLDAP_directory_data_organisation#Services | service user]].
+
#: scope: <code>one</code>
−
# If the user exists, try to bind with the [[stoney_core:_OpenLDAP_directory_data_organisation#People_uid_.28per_person.29 | users credentials]]. For example:
+
# If the user exists, use the retrieved DN and try to bind with it (a working LDIF is described under [[stoney_core:_OpenLDAP_directory_data_organisation#People_uid_.28per_person.29 | users credentials]]).
−
#: <code>name.surname@example.com</code>
+
#: bind dn: <code>uid=<UID>,ou=people,dc=stoney-cloud,dc=org</code>
−
#: <code>myverysecretpassword</code>
+
#: password: <code>myverysecretpassword</code>
−
# If the bind was successful, retrieve the users [[stoney_core:_OpenLDAP_directory_data_organisation#People_Roles | roles]].
+
# If the bind was successful, retrieve further information with the LDAP service user from the leaf uid=<UID>,ou=people,dc=stoney-cloud,dc=org.
 +
 
 +
An example how to bind with the user credentials, presuming uid=<UID>:
 +
ldapsearch -H ldaps://ldapm.stoney-cloud.org -b "ou=people,dc=stoney-cloud,dc=org" -D "uid=<UID>,ou=people,dc=stoney-cloud,dc=org" -x "(objectclass=*)" -v -W
 +
 
 +
Information about the configurable LDAP service user:
 +
* Currently, the LDAP service user is cn=Manager,dc=stoney-cloud,dc=org
 +
* Later on, this will be a [[stoney_core:_OpenLDAP_directory_data_organisation#Services | LDAP service user]].
 +
 
 +
=== Auth Retrieval (GET) Mapping ===
 +
{| border="1" class="wikitable sortable"
 +
! API Attribute
 +
! LDAP Attribute
 +
|-
 +
| id
 +
| uid
 +
|-
 +
| user
 +
| mail
 +
|-
 +
 
 +
|}
  
 
= Links =
 
= Links =

Latest revision as of 11:47, 26 June 2014

Also visit stoney core: Authentication Resource - REST API.

Overview

Auth Action

Auth Retrieval (GET)

The following sequence describes the authentication retrieval:

  1. Look-up the user in the OpenLDAP directory in the ou=people,dc=stoney-cloud,dc=org sub tree (with a configurable LDAP service user):
    filter: (mail=name.surname@example.com)
    scope: one
  2. If the user exists, use the retrieved DN and try to bind with it (a working LDIF is described under users credentials).
    bind dn: uid=<UID>,ou=people,dc=stoney-cloud,dc=org
    password: myverysecretpassword
  3. If the bind was successful, retrieve further information with the LDAP service user from the leaf uid=<UID>,ou=people,dc=stoney-cloud,dc=org.

An example how to bind with the user credentials, presuming uid=<UID>: 

ldapsearch -H ldaps://ldapm.stoney-cloud.org -b "ou=people,dc=stoney-cloud,dc=org" -D "uid=<UID>,ou=people,dc=stoney-cloud,dc=org" -x "(objectclass=*)" -v -W

Information about the configurable LDAP service user:

  • Currently, the LDAP service user is cn=Manager,dc=stoney-cloud,dc=org
  • Later on, this will be a LDAP service user.

Auth Retrieval (GET) Mapping

API Attribute LDAP Attribute
id uid
user mail

Links

Retrieved from "http://wiki.stoney-cloud.org/mediawiki/index.php?title=stoney_core:_Authentication_Resource_Mapping_(REST_-_LDAP)&oldid=3716"