Getting The Entry And Checking The Credentials - Netscape DIRECTORY SERVER 7.0 - PLUG-IN Manual

Writing a Pre-Operation Bind Plug-in
•
SLAPI_BIND_CREDENTIALS
sent by the client.
If you plan to support authentication through SASL mechanisms, you should also
get the value of the
specifying the name of the SASL mechanism to use for authentication).
Make sure to check the following:
• Determine if the client is requesting to bind as an anonymous user.
If the
SLAPI_BIND_CREDENTIALS
attempting to bind anonymously.
Call
LDAP_SUCCESS
• If the
recognize or support, call
LDAP_STRONG_AUTH_NOT_SUPPORTED
In both cases, return a non-zero value to prevent the server from calling the
default backend function for authentication.

Getting the Entry and Checking the Credentials

Get the entry for the DN specified by the
compare the credentials in the
known credentials for that entry.
By default, Directory Server 4.x uses the
credentials for an entry. The server encodes the password using the scheme
specified in the
scheme can be
By default, Directory Server 7.x uses the
credentials for an entry. The server encodes the password using the scheme
specified in the
attributes of the
be any of the following:
•
CLEAR
clear-password-storage-scheme
•
CRYPT
crypt-password-storage-scheme
108 Netscape Directory Server Plug-in Programmer's Guide • October 2004
SLAPI_BIND_SASLMECHANISM
SLAPI_BIND_METHOD
slapi_send_ldap_result()
back to the client.
SLAPI_BIND_METHOD
passwdhash
, , or "." (for cleartext).
crypt sha
nsslapd-rootpwstoragescheme
entry contained in the
cn=config
— Means no encryption and can be defined using the
— Means Unix crypt algorithm and can be defined using the
— A structure containing the credentials
berval
parameter is
LDAP_AUTH_SIMPLE
parameter is empty or NULL, the client is
to send the LDAP result code
parameter specifies a method that you do not
slapi_send_ldap_result()
result code back to the client.
SLAPI_BIND_TARGET
SLAPI_BIND_CREDENTIALS
userpassword
directive of the
slapd.conf
userpassword
or
dse.ldif
plug-in.
plug-in.
parameter (a string value
and the
to send an
parameter, and
parameter against the
attribute to store the
configuration file. The
attribute to store the
passwordStorageScheme
file. The scheme can