Hi Trevor,
sorry I generated the patch from a wrong environment. I`m on the road now, I will send you
the complete patch including those 2 methods for sync on friday when I will be back in the
office.
B.R.
Vlado
--
Sent from my Android phone with K-9 Mail. Please excuse my brevity.
Trevor McKay <tmckay(a)redhat.com> wrote:
Hi Vladimir,
I've started looking at the LDAP patch. Thanks again.
In cumin-admin, the ldap-status and ldap-sync commands appear to be
stubs. Do you have something to go there? What do you intend?
Thanks,
Trevor
On Tue, 2011-08-30 at 13:31 +0200, Vladimir Motoska wrote:
Hi all,
some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
The configuration is easy just add "auth" line to config file. Auth parameter
has the following format
[backend]=[url]
i.e.:
auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
To enable a user to login with ldap credentials you need to create the user in
cumin db by entering
#cumin-admin add-user [database] USER [PASSWORD]
database can be internal or external ( internal is the default auth mechanism )
For the future it would be maybe better to enable a http proxy authentication
like apache... This would enable easy integration with SSO infrastructure or
various backends. However we would appreciate your feedback in this matter
since you have more clear vision of further Cumin development.
Best Regards
_____________________________________________
cumin-users mailing list
cumin-users(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cumin-users
_____________________________________________
cumin-users mailing list
cumin-users(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cumin-users