stoney core: Authentication Resource Mapping (REST - LDAP)

From stoney cloud
Revision as of 13:46, 1 May 2014 by Michael (Talk | contribs)


Jump to: navigation, search

Also visit stoney core: Authentication Resource - REST API.

Overview

Auth Action

Auth Retrieval (GET)

The following sequence describes the authentication and role retrieval:

  1. Look-up the user in the OpenLDAP directory (with a configurable LDAP service user):
    Currently, this will be cn=Manager,dc=stoney-cloud,dc=org
    Later on, this will be a service user.
  2. If the user exists, try to bind with the users credentials.
  3. If the bind was successful, retrieve further information with the LDAP service user.

Auth Retrieval (GET) Mapping

API Attribute LDAP Object DN LDAP Attribute Details
People uid (per person)
id uid=4000002,ou=people,dc=stoney-cloud,dc=org uid Always read-only.
user uid=4000002,ou=people,dc=stoney-cloud,dc=org mail

Links