Red Hat DIRECTORY SERVER 7.1 - PLUG-IN PROGRAMMERS Manual page 104

How the Authentication Process Works
H
H
The server calls any pre-operation bind plug-in functions. If the function
9.
returns a non-zero value, the server ends the processing of the
If you are writing your own plug-in function to handle authentication, you
should return a non-zero value so that the server does not attempt to continue
processing the
The server calls the backend
10.
the following values:
H
H
If the backend
11.
parameter to the DN and the
authentication method.
The server sends an
12.
processing of the
If the client's password is going to expire, the server includes a
expiring
the client. If the client is logging in for the first time and needs to change the
password, the server includes a
2.16.840.1.113730.3.4.4) with the result sent to the client.
102 Red Hat Directory Server Plug-in Programmer's Guide • May 2005
If the credentials are correct, the server sets the
parameter to the DN and the
. The server sends an
LDAP_AUTH_SIMPLE
to the client and ends the processing of the
If the credentials are incorrect, the server sends an
LDAP_INVALID_CREDENTIALS
processing of the
bind
request.
bind
If the function returns a non-zero value, the server ends the processing of
the request. The
bind
appropriate result code back to the client before returning a non-zero
value.
If the function returns
The server sends the
function does not do this.)
bind
function succeeds, the server sets the
bind
LDAP_SUCCESS
request.
bind
control (with the OID 2.16.840.1.113730.3.4.5) with the result sent to
SLAPI_CONN_AUTHTYPE
LDAP_SUCCESS
result code back to the client and ends the
request.
function. The
bind
function is responsible for sending the
bind
, the server continues processing the
0
result code back to the client. (The
LDAP_SUCCESS
SLAPI_CONN_AUTHTYPE
result code back to the client and ends the
password expired
SLAPI_CONN_DN
parameter to
result code back
request.
bind
bind
function returns one of
bind
bind
SLAPI_CONN_DN
parameter to the
password
control (with the OID
request.
request.