Re: Authentication in referrals

[Daniel Merino <daniel.merino@unavarra.es>]

Thank you all for your help.

I don't have access to the code and I'm commited to ACI's, I'm afraid. 
Why ACI's are not good?

Actually I can use an ACI for limiting the anonym write-access only to 
the consumer server ip, but I don't like it too much.

As I said, thanks.


Tony Earnshaw wrote:

> man, 15.03.2004 kl. 13.48 skrev Daniel Merino:
>
>  
>
> > I have a replica of one branch from one LDAP to another in a 
> > master-client agreement. The replica works fine, but now I'm trying to 
> > make a referral from the client to the master. The proposal is that when 
> > somebody tries to write his own entry in the client, the referral goes 
> > to the master and then updates the entry there.
> >
> > The referral is created automatically when I do the replica, but when I 
> > try to write in the consumer, the update in the master comes as anonym 
> > user and I have the ACI configured to don't allow to write this user.
> >
> > How could I validate as another user in the referral URL? Or how can I 
> > get an ACI that allows to write to anonym referrals but not to anonym 
> > users? Any idea?
> >    
>
> No idea, but I have this innate distrust of ACIs, so don't use them 
> (maybe Adam Williams could correct me on this).
>
> Would you be able to confirm that this happens with normal ACLs too, or
> are you completely committed to ACIs?
>
> --Tonni
>
>  

--
Daniel Merino
daniel.merino@unavarra.es
Tfno: 948-168951 - Sección de Gestión
Servicio Informático - Universidad Pública de Navarra.