httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Emmanuel Lacour <elac...@easter-eggs.com>
Subject [mod_auth_ldap] filter enhancement
Date Fri, 24 Mar 2006 09:56:01 GMT
Hi everybody,

I would like to enhance this module to be able to match the username in
more than one attribut in an "OR" condition.

Currently, this module uses the AuthLDAPURL:

AuthLDAPURL
ldap://server/searchbase?attribute_containing_the_login?scope?additionnal_filter

it constructs the filter like this:

(&(attribute_containing_the_login=provided_login)(additionnal_filter))


but I think it could be usefull (I need it now ;)) to have more than one
"attribute_containing_the_login".


I see to way for doing this:

Permit multiple attributes separated by comma in place of
attribute_containing_the_login, as stated in RFC 2255.

resulting filter wille be:

(&(|(attr1=provided_login)(attr2=provided_login)(...))(additionnal_filter))


Or

Permit to not provide "attribute_containing_the_login" but replace any
occurence of for example "%u" in the additionnal_filter by the provided
login.


I'm okay to provide a patch, but I would like to know your opinion on
those 2 way.

-- 
Emmanuel Lacour ------------------------------------ Easter-eggs
44-46 rue de l'Ouest  -  75014 Paris   -   France -  Métro Gaité
Phone: +33 (0) 1 43 35 00 37    -     Fax: +33 (0) 1 41 35 00 76
mailto:elacour@easter-eggs.com   -    http://www.easter-eggs.com

Mime
View raw message