What To Do If Authentication Fails; What To Do If Authentication Succeeds - Netscape DIRECTORY SERVER 6.01 - PLUG-IN Manual

• (means Secure Hashing Algorithm and can be defined using the
SHA
sha
-password-storage-scheme
• (means Salted Secure Hashing Algorithm and can be defined using the
SSHA
ssha-password-storage-scheme
If you need to compare the client's credentials against the value of the
attribute, you can call the
userpassword
function determines which password scheme was used to store the password and
uses the appropriate comparison function to compare a given value against the
encrypted value of the

What to Do If Authentication Fails

If authentication fails, send one of the following result codes back to the client:
• If no entry matches the DN specified by the client, send an
LDAP_NO_SUCH_OBJECT
When calling the
back to the client, specify the closest matching DN as the
• If the client fails to provide the necessary credentials or if credentials cannot be
found in the entry, send an
client.
• If the credentials specified by the client do not match the credentials found in
the entry, send an
• If a general error occurs, send an
the client.
Your function should also return a non-zero value
(
SLAPI_BIND_FAIL_OR_ANONYMOUS
You do not need to set any values for the
SLAPI_CONN_AUTHTYPE
and
LDAP_AUTH_NONE

What to Do If Authentication Succeeds

If the authentication is successful, your authentication function should do the
following:
• Call
slapi_pblock_set()
and the
SLAPI_CONN_AUTHTYPE
method.
plug-in)
plug-in)
slapi_pw_find_sv()
attribute.
userpassword
result code back to the client.
slapi_send_ldap_result()
LDAP_INAPPROPRIATE_AUTH
LDAP_INVALID_CREDENTIALS
LDAP_OPERATIONS_ERROR
in Netscape Directory Server 4.x).
SLAPI_CONN_DN
parameter. By default, these parameters are set to NULL
, which indicate that the client has bound anonymously.
to set the values of the
parameter to the DN and authentication
Writing a Pre-Operation Bind Plug-in
function to send the result code
matched
result code back to the
result code back to the client.
parameter and the
SLAPI_CONN_DN
Chapter 8 Defining Functions for Authentication
function. This
argument.
result code back to
parameter
99