Project

General

Profile

Actions

Bug #6321

closed

Metacat login mechanism needs to handle the ldap alias account

Added by Jing Tao almost 11 years ago. Updated almost 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
12/19/2013
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:

Description

We are planning to trim the nceas ldap to have one subtree ou=Account which has the real users. The other subtrees, such as o=unaffiliated, will be an alias to an entry in ou=Account. The alias entry looks like:

dn: uid=wu,o=unaffiliated,dc=ecoinformatics,dc=org
objectClass: alias
ObjectLcass: extensibleObject
uid: wu
aliasedObjectName: uid=tao,ou=Account,dc=ecoinformatics,dc=org

LDAP doesn't provide the dereference mechanism for the bind. It only provides the search dereference:
ldapsearch -x -a search -h ldap-dev.ecoinformatics.org -b uid=wu,o=unaffiliated,dc=ecoinformatics,dc=org

We need to add code on Metacat AuthLdap to handle the alias login.

Actions

Also available in: Atom PDF