[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: proxyAuth for bind (Was: Can I bind to server with DN not on server ?)

To: ando@sys-net.it
Subject: Re: proxyAuth for bind (Was: Can I bind to server with DN not on server ?)
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Sun, 30 Nov 2003 11:19:30 -0800
Cc: <hyc@symas.com>, <ftr@highstreetnetworks.com>, <openldap-devel@OpenLDAP.org>
In-reply-to: <3031.151.29.241.102.1070204108.squirrel@webmail.sys-net.it >
References: <011401c3b670$fa06ae00$1801a8c0@CELLO> <3FC8A59A.30308@sys-net.it> <6.0.0.22.0.20031129111817.03fb4750@127.0.0.1> <3031.151.29.241.102.1070204108.squirrel@webmail.sys-net.it>

At 06:55 AM 11/30/2003, Pierangelo Masarati wrote:
>In the present case, I think this is an overkill, thou.
>I think we don't really need to have binds chained; if
>proxyAuthz allows to propagate other operations with
>an identity, this is enough.

I think we'll need to distinguish whether its the client
or the chaining server or both which is requesting proxy
authorization.  Error handling will be really hairy if we
don't.

Kurt

References:
- proxyAuth for bind (Was: Can I bind to server with DN not on server ?)
  - From: Pierangelo Masarati <ando@sys-net.it>
- Re: proxyAuth for bind (Was: Can I bind to server with DN not on server ?)
  - From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
- Re: proxyAuth for bind (Was: Can I bind to server with DN not on server ?)
  - From: "Pierangelo Masarati" <ando@sys-net.it>

Prev by Date: sl_malloc vs. malloc debuggers
Next by Date: RE: commit: ldap/servers/slapd sasl.c
Index(es):
- Chronological
- Thread