LDAP doesn't absolutely require a password for access

dsrand's picture
It would be nice if the AD and LDAP providers did not require a password - our LDAP/AD provider does not require one for verifying user information and retrieving user attributes.
dimuthul's picture

Yes. We will consider that

Yes. We will consider that in the new release. Thank you for the feedback, DimuthuL
rpeterso.mtholyoke.edu's picture

A little more on that..

I think you should keep the proxy user setup you already have, but add a toggle between anonymous bind vs. search-and-bind. Search and bind is more general, and allows you to handle the case where not all users live directly w/in the base DN. Config something like: URI: ldaps://myserver.com Base DN: ou=some,ou=place,dc=mydomain,dc=com Username attribute: e.g. cn, uid Anonymous bind: yes/no (no implies search-and-bind) if no, then also: Proxy user: cn=proxy,dc=mydomain,dc=com Proxy password: topsecret Search scope: one/sub/children Search filter: e.g. &(objectClass=posixUser)(memberUid=agroup)) Retrieving attributes after authentication could be done by either the proxy user (if used), or the logged in user. Maybe that should also be a toggle. If not, I'd default to the logged in user.
library project main code
Learn Cloud
Learn
Cloud

The WSO2 Application Server is a reliable application server that can host your enterprise web applications. The WSO2 Application Server as a Service is offered in StratosLive, the WSO2 Platform as a Service. This article explains how a simple web application can be developed and deployed from Carbon Studio to the WSO2 Application Server...

Latest Webinar
Different groups within an organization need to monitor different Key Performance Indicators (KPIs) - An operations team will be interested in the response times of business services and loads of each service,..
Thursday, February 9th 2012, 09.00 AM (PST)

Thursday, February 9th 2012, 10.00 AM (GMT)