Netscape DIRECTORY SERVER 7.0 - PLUG-IN Manual page 104

How the Authentication Process Works
The server calls any pre-operation bind plug-in functions. If the function
9.
returns a non-zero value, the server ends the processing of the
If you are writing your own plug-in function to handle authentication, you
should return a non-zero value so that the server does not attempt to continue
processing the
The server calls the backend
10.
the following values:
If the backend
11.
parameter to the DN and the
authentication method.
The server sends an
12.
the processing of the
If the client's password is going to expire, the server includes a
expiring
the client. If the client is logging in for the first time and needs to change the
password, the server includes a
2.16.840.1.113730.3.4.4) with the result sent to the client.
104 Netscape Directory Server Plug-in Programmer's Guide • October 2004
If the credentials are correct, the server sets the
parameter to the DN and the
. The server sends an
LDAP_AUTH_SIMPLE
to the client and ends the processing of the
If the credentials are incorrect, the server sends an
LDAP_INVALID_CREDENTIALS
processing of the
bind
request.
bind
If the function returns a non-zero value
(
SLAPI_BIND_FAIL_OR_ANONYMOUS
server ends the processing of the
responsible for sending the appropriate result code back to the client
before returning a non-zero value.
If the function returns
Server 4.x), the server continues processing the
sends the
LDAP_SUCCESS
function does not do this.)
function succeeds, the server sets the
bind
LDAP_SUCCESS
bind
control (with the OID 2.16.840.1.113730.3.4.5) with the result sent to
SLAPI_CONN_AUTHTYPE
LDAP_SUCCESS
bind
result code back to the client and ends the
request.
function. The
bind
in Netscape Directory Server 4.x), the
request. The
bind
(
0 SLAPI_BIND_SUCCESS
result code back to the client. (The
SLAPI_CONN_AUTHTYPE
result code back to the client and ends
request.
password expired
SLAPI_CONN_DN
parameter to
result code back
request.
request.
bind
function returns one of
bind
function is
bind
in Netscape Directory
request. The server
bind
bind
SLAPI_CONN_DN
parameter to the
password
control (with the OID