directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Perelman <>
Subject checking group membership during while binding
Date Wed, 18 Mar 2015 23:50:41 GMT
While using Apache LDAP java APIs, is there a way to check for group membership during the
binding process? Or is the only way to determine group membership is by doing a regular lookup,
and only after binding? The latter approach may not work because the authenticated user may
not have the access rights to perform any lookups, thereby forcing the use of an LDAP administrator.
That means that its credentials need to be stored somewhere outside the LDAP server in order
for the client code to use its account for the aforementioned lookup. What approach would
you suggest?
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message