Hi Vladimir,
I've started looking at the LDAP patch. Thanks again.
In cumin-admin, the ldap-status and ldap-sync commands appear to be
stubs. Do you have something to go there? What do you intend?
Thanks,
Trevor
On Tue, 2011-08-30 at 13:31 +0200, Vladimir Motoska wrote:
> Hi all,
>
> some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
>
> We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
> The configuration is easy just add "auth" line to config file. Auth parameter
> has the following format
> [backend]=[url]
>
> i.e.:
>
auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
>
> To enable a user to login with ldap credentials you need to create the user in
> cumin db by entering
> #cumin-admin add-user [database] USER [PASSWORD]
> database can be internal or external ( internal is the default auth mechanism )
>
> For the future it would be maybe better to enable a http proxy authentication
> like apache... This would enable easy integration with SSO infrastructure or
> various backends. However we would appreciate your feedback in this matter
> since you have more clear vision of further Cumin development.
>
> Best Regards
>
> cumin-users mailing list
> cumin-users@lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/cumin-users
cumin-users mailing list
cumin-users@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cumin-users