Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Message-ID: <2003777252.1250326636134.JavaMail.jira@brutus>
Date: Sat, 15 Aug 2009 01:57:16 -0700 (PDT)
From: "Emmanuel Lecharny (JIRA)" <jira@apache.org>
To: dev@directory.apache.org
Subject: [jira] Updated: (DIRSERVER-1217) Binds with referrals can be used
 for delegated authentication
In-Reply-To: <1271770319.1217984204224.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/DIRSERVER-1217?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Emmanuel Lecharny updated DIRSERVER-1217:
-----------------------------------------

    Fix Version/s:     (was: 1.5.5)
                   2.0.0-RC1

Postponed to 2.0.0-RC1

> Binds with referrals can be used for delegated authentication
> -------------------------------------------------------------
>
>                 Key: DIRSERVER-1217
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1217
>             Project: Directory ApacheDS
>          Issue Type: New Feature
>            Reporter: Alex Karasulu
>             Fix For: 2.0.0-RC1
>
>
> It's possible to perform delegated authentication by handling referral chasing in the server on bind operations.  This could be a new external authentication mechanism.  If a bind request using a principalDn represents a referral or does not exist but has a referral at some ancestor in the DN then the server can delegate the authentication to the target server.  If the target server referrenced in the ref attribute authenticates the user then ApacheDS accepts the user as authenticated.  

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.