I'm working on an alumni directory for the college, which uses openldap as the directory service. We are using acl's to restrict which attributes user have access to based on their context (staff, student, alumni, guest, etc). This means that the alumni directory needs to bind to ldap as each user. We want to use zldap, but the Ldap Connection object creates a connection, bound as one user. Is it possible to have 'dynamic' ldap connections (and use the rest of the zldap package), ones where you can re-bind as another user? Or is there some other (better) way to do this? I've seen other products out there which allow this by using an ldap user folder, however we have a custom user folder that integrates with our institutions single sign-on server, so that won't work (and we have a different method of retrieving a users password). Any help would be great! Thanks! Andy Altepeter Web Developer Bethel College & Seminary
The ZLDAP product has not seen any development in a few years. jens On Wednesday, Aug 20, 2003, at 16:00 US/Eastern, Andrew Altepeter wrote:
I'm working on an alumni directory for the college, which uses openldap as the directory service. We are using acl's to restrict which attributes user have access to based on their context (staff, student, alumni, guest, etc).
This means that the alumni directory needs to bind to ldap as each user.
We want to use zldap, but the Ldap Connection object creates a connection, bound as one user. Is it possible to have 'dynamic' ldap connections (and use the rest of the zldap package), ones where you can re-bind as another user?
Or is there some other (better) way to do this?
I've seen other products out there which allow this by using an ldap user folder, however we have a custom user folder that integrates with our institutions single sign-on server, so that won't work (and we have a different method of retrieving a users password).
Any help would be great! Thanks! Andy Altepeter Web Developer Bethel College & Seminary
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Andrew Altepeter wrote at 2003-8-20 15:00 -0500:
I'm working on an alumni directory for the college, which uses openldap as the directory service. We are using acl's to restrict which attributes user have access to based on their context (staff, student, alumni, guest, etc).
This means that the alumni directory needs to bind to ldap as each user.
We want to use zldap, but the Ldap Connection object creates a connection, bound as one user. Is it possible to have 'dynamic' ldap connections (and use the rest of the zldap package), ones where you can re-bind as another user?
Probably yes, but I use "LDAPUserFolder" (which works this way). You can look at it to find out how to it manages its connection. Dieter
participants (3)
-
Andrew Altepeter -
Dieter Maurer -
Jens Vagelpohl