stoney core: Authentication Resource Mapping (REST - LDAP)

Also visit stoney core: Authentication Resource - REST API.

Auth Action

Auth Retrieval (GET)

The following sequence describes the authentication and role retrieval:

1. Look-up the user in the OpenLDAP directory (with a configurable service user):

   Currently, this will be cn=Manager,dc=stoney-cloud,dc=org

   Later on, this will be a service user.

2. If the user exists, try to bind with the users credentials.
3. If the bind was successful, retrieve the users roles with the service user.

Auth Retrieval (GET) Mapping

API Attribute	LDAP Object DN	LDAP Attribute	Details
People uid (per person)
id	uid=4000002,ou=people,dc=stoney-cloud,dc=org	uid	Always read-only.
user	uid=4000002,ou=people,dc=stoney-cloud,dc=org	mail
People Roles
roles	sstRole=Monitoring Administrator,uid=4000002,ou=people,dc=stoney-cloud,dc=org sstRole=User,uid=4000002,ou=people,dc=stoney-cloud,dc=org sstRole=Virtulization Administrator,uid=4000002,ou=people,dc=stoney-cloud,dc=org	sstRole