Table of Contents
Advertisement
Writing a Pre-Operation Bind Plug-in
This sets the DN and authentication method for the connection to the client.
(The server uses this DN and method in subsequent operations when checking
access rights.)
You can set
Note that these values differ from the values in the
parameter. The values listed above are string values defined in the
slapi-plugin.h
parameter (such as
values defined in the
•
If you want to, specify the credentials that you want sent back to the client.
If the value of the
you want to return a set of credentials to the client, call
to set the
•
Send the result of the authentication process back to the client.
Call
the client.
Make sure that your function returns a non-zero value to bypass the default
backend bind function and any post-operation plug-in functions.
Registering the SASL Mechanism
If you are using SASL as the authentication method, you need to register the SASL
mechanisms that you plan to use.
In your initialization function (see "Writing Plug-in Initialization Functions" on
page 32), call the
of the SASL mechanism. For example:
slapi_register_supported_saslmechanism( "babsmechanism" );
100
Netscape Directory Server Plug-In Programmer's Guide • January 2002
SLAPI_CONN_AUTHTYPE
represents no authentication. (The client is binding
SLAPD_AUTH_NONE
anonymously.)
SLAPD_AUTH_SIMPLE
represents authentication through SSL.
SLAPD_AUTH_SSL
represents SASL authentication.
SLAPD_AUTH_SASL
header file, whereas the values of the
LDAP_AUTH_SIMPLE
ldap.h
SLAPI_BIND_METHOD
SLAPI_BIND_RET_SASLCREDS
slapi_send_ldap_result()
Functions for Syntax Plug-In
to one of the following values:
represents the simple authentication method.
and
LDAP_AUTH_SASL
header file.
parameter is
parameter to the credentials.
to send an
LDAP_SUCCESS
SLAPI_BIND_METHOD
SLAPI_BIND_METHOD
) are integer
LDAP_AUTH_SASL
slapi_pblock_set()
return code to
function and specify the name
and
Advertisement
Table of Contents
