Netscape DIRECTORY SERVER 6.02 - PLUG-IN Manual page 94

How the Authentication Process Works
The server calls any pre-operation bind plug-in functions. If the function
9.
returns a non-zero value, the server ends the processing of the bind request.
If you are writing your own plug-in function to handle authentication, you
should return a non-zero value so that the server does not attempt to continue
processing the bind request.
The server calls the backend bind function. The bind function returns one of
10.
the following values:
If the backend bind function succeeds, the server sets the
11.
parameter to the DN and the
authentication method.
The server sends an
12.
processing of the bind request.
If the client's password is going to expire, the server includes a "password
expiring" control (with the OID 2.16.840.1.113730.3.4.5) with the result sent to
the client. If the client is logging in for the first time and needs to change the
password, the server includes a "password expired" control (with the OID
2.16.840.1.113730.3.4.4) with the result sent to the client.
94 Netscape Directory Server Plug-In Programmer's Guide • May 2002
If the credentials are correct, the server sets the
parameter to the DN and the
. The server sends an
LDAP_AUTH_SIMPLE
to the client and ends the processing of the bind request.
If the credentials are incorrect, the server sends an
LDAP_INVALID_CREDENTIALS
processing of the bind request.
If the function returns a non-zero value (
in Netscape Directory Server 4.x), the server ends the processing of the
bind request. The bind function is responsible for sending the appropriate
result code back to the client before returning a non-zero value.
If the function returns 0 (
Server 4.x), the server continues processing the bind request. The server
sends the
LDAP_SUCCESS
does not do this.)
LDAP_SUCCESS
SLAPI_CONN_AUTHTYPE
LDAP_SUCCESS
result code back to the client and ends the
SLAPI_BIND_FAIL_OR_ANONYMOUS
SLAPI_BIND_SUCCESS
result code back to the client. (The bind function
SLAPI_CONN_AUTHTYPE
result code back to the client and ends the
SLAPI_CONN_DN
parameter to
result code back
in Netscape Directory
SLAPI_CONN_DN
parameter to the