Hi Trevor,

sorry I generated the patch from a wrong environment. I`m on the road now, I will send you the complete patch including those 2 methods for sync on friday when I will be back in the office.


Sent from my Android phone with K-9 Mail. Please excuse my brevity.

Trevor McKay <tmckay@redhat.com> wrote:
Hi Vladimir,

I've started looking at the LDAP patch. Thanks again.

In cumin-admin, the ldap-status and ldap-sync commands appear to be
stubs. Do you have something to go there? What do you intend?



On Tue, 2011-08-30 at 13:31 +0200, Vladimir Motoska wrote:
> Hi all,
> some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
> We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
> The configuration is easy just add "auth" line to config file. Auth parameter
> has the following format
> [backend]=[url]
> i.e.:
> auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
> To enable a user to login with ldap credentials you need to create the user in
> cumin db by entering
> #cumin-admin add-user [database] USER [PASSWORD]
> database can be internal or external ( internal is the default auth mechanism )
> For the future it would be maybe better to enable a http proxy authentication
> like apache... This would enable easy integration with SSO infrastructure or
> various backends. However we would appreciate your feedback in this matter
> since you have more clear vision of further Cumin development.
> Best Regards

> cumin-users mailing list
> cumin-users@lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/cumin-users

cumin-users mailing list