Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (hermes.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: AW: WG: [server] writing my own authenticator
Date: Thu, 16 Jun 2005 10:07:18 +0200
Message-ID: 
 <ACEE18BEFA7D994CBCD83D6A76471F06A0F4C9@XW2K3-FRAMBX-01.ads.dlh.de>
Thread-Topic: WG: [server] writing my own authenticator
Thread-Index: AcVyEjFfRW0qNq6KR3SWuEWCFCUMVAAMXLCA
From: <christian.huebert@lhsystems.com>
To: <dev@directory.apache.org>

Hi,

What I'm trying to implemnt, is too get several attributes only passed =
to known hosts. At the next step, I'd like to pass some attributes only =
to the client if he uses a secure connection.

So I could use the clients hostname or IP and if he is using a secure =
protocol like SSL or not.

I've learned, that the in big companies logins and passwords to systems =
spread like fire (i.e. when programmers begin another project), but in a =
well secured network it is not quite as easy to use the IP of another =
server. Or at least, when i have an IP I cant track down, who accesses =
my systems.

IMHO to these reasons a principal and credentials is not enough too =
authenticate somebody.

>So we're good if the protocol provider stuff's this extra information=20
>into the environment of the context.  We can make the changes but how=20
>should we manage the keys?
>What do you want in there?  Would you like to make the changes yourself =

>and see if it works?

I think in BindRequest ProtocolSession.getTransportType() and =
ProtocolSession.getRemoteAdress should be stored in the context. When =
you have no time to do this, perhaps I could do this tomorrow from home, =
because my svn plugin cannot use a proxy. But to be honest, I'd never =
checked some source in or changed one of your projects, so I'm a little =
nervous about that. ;-)

Greetings
Christian