Red Hat DIRECTORY SERVER 7.1 - PLUG-IN PROGRAMMERS Manual page 103

If the method of authentication is
4.
server determines whether the SASL mechanism (specified in the request) is
supported.
If the SASL mechanism is not supported by the server, the server sends an
LDAP_AUTH_METHOD_NOT_SUPPORTED
processing of the bind request.
If the method of authentication is
5.
the server checks if the DN is an empty string or if there are no credentials.
If the DN is an empty string, if the DN is not specified, or if no credentials are
specified, the server assumes that the client is binding anonymously and sends
an
LDAP_SUCCESS
The DN and authentication method for the connection, which are used to
determine access rights for all operations performed through the connection,
are left as NULL and
If the DN specified in the request is not served by this Directory Server (for
6.
example, if the DN is
root of the server is
two results back to the client and ends the processing of the
If the server is configured with a default referral (an LDAP URL
H
identifying an LDAP server that handles referrals), the server sends an
LDAP_REFERRAL
the client only supports the LDAPv2 protocol).
If the server is not configured with a default referral, the server sends an
H
LDAP_NO_SUCH_OBJECT
The server puts the information from the bind request into the parameter
7.
block:
SLAPI_BIND_TARGET
H
SLAPI_BIND_METHOD
H
LDAP_AUTH_SIMPLE
SLAPI_BIND_CREDENTIALS
H
password) included in the request.
SLAPI_BIND_SASLMECHANISM
H
LDAP_AUTH_SASL
is using for authentication.
If the DN is the root DN or the update DN (the DN of the master entity
8.
responsible for replicating the directory), the server authenticates the client.
LDAP_AUTH_SASL
result code back to the client and ends the
LDAP_AUTH_SIMPLE
result code back to the client.
SLAPD_AUTH_NONE
uid=moxcross,dc=example,dc=net
dc=example,dc=com
result code back to the client (
result code back to the client.
is set to the DN as which the client is authenticating.
is set to the authentication method (for example,
or
LDAP_AUTH_SASL
is set to the credentials (for example, the
(if the authentication method is
) is set to the name of the SASL mechanism that the client
How the Authentication Process Works
(SASL authentication), the
(simple authentication),
, respectively.
, and the directory
), the server sends one of the following
bind
LDAP_PARTIAL_RESULTS
).
Chapter 8 Defining Functions for Authentication
request:
if
101