Mailing-List: contact dev-help@cocoon.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cocoon.apache.org
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Cocoon 2.1 Authentication Bug?  *Please* Help
Date: Tue, 2 Sep 2003 09:56:24 +0200
Message-ID: <5B093C49F2649B459246944825A267AB3FC1F4@sxmbx03.corproot.net>
Thread-Topic: Cocoon 2.1 Authentication Bug?  *Please* Help
Thread-Index: AcNwmMfMoR4ewyQVThCwJopaz3yA6gAjTw3A
From: <Sylvain.Thevoz@swisscom.com>
To: <dev@cocoon.apache.org>

Hello,

Yes, I don't have roles since I'm using the LDAP authentication, all =
users are "Admin" at this moment.

Do you think to create a static list in a file or database and check =
which role has the user?

I have thought about creating a static list but my problem is that I =
have to enter ~1000 users in this list (I have about 20'000 users but =
only ~1000 have special roles). The solution is maybe to use the groups =
defined in the LDAP repository, you would have ~10 groups instead of =
~1000 users in the static list. But in you have groups, you have to use =
a LDAP query to know if the authenticated user is in a group. It seems a =
bit complicated, no?

What do you think about the best practise?

Thanks
Regards
Sylvain


-----Message d'origine-----
De: Carsten Ziegeler [mailto:cziegeler@s-und-n.de]
Date: lundi, 1. septembre 2003 16:28
=C0: dev@cocoon.apache.org
Objet: RE: Cocoon 2.1 Authentication Bug? *Please* Help


Sylvain.Thevoz@swisscom.com [mailto:Sylvain.Thevoz@swisscom.com] wrote:
> OK, I understand the mechanism.
>=20
> About the roles, since I used LDAP for the authentication I have=20
> a problem how to define the roles.
> By default the authentication uses the file sunrise-user.xml and=20
> the role is defined for each user inside this file.
> With LDAP authentication I retrieve the users from a LDAP=20
> repository and the role isn't defined in this repository.=20
> Have you an idea how I could define the role for each users?
>=20
I guess from the above that you don't have roles. So, I would give
each user a default role and create a static list of roles with
this one role.

HTH
Carsten