Writing Your Own Authentication Plug-In; Writing A Pre-Operation Bind Plug-In - Netscape DIRECTORY SERVER 7.0 - PLUG-IN Manual

Writing Your Own Authentication Plug-in

A situation may arise in which you may want to write and implement your own
function for authentication; that is, replace the standard means of authentication
with your own function. You can write a pre-operation bind plug-in function (a
function that the server calls before processing an LDAP
performs the authentication and bypasses the default bind functionality. For
details, see the next section, "Writing a Pre-Operation Bind Plug-in," on page 105.

Writing a Pre-Operation Bind Plug-in

You can define your own pre-operation bind plug-in function to authenticate
LDAP clients. The server will call your function during the authentication process
(in Step 9). Your function should return a non-zero value to bypass the default
backend bind function and the post-operation bind functions.
Note that this means that Step 10 through Step 12 are skipped. Your pre-operation
plug-in function is responsible for sending the result code to the client and for
setting the DN and authentication method for the connection.
Figure 8-1 summarizes the process of using a pre-operation bind plug-in function
to authenticate LDAP clients to the Directory Server.
Writing Your Own Authentication Plug-in
request) that
bind
Chapter 8 Defining Functions for Authentication 105