LDAP Authentication Assistance

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

agr8bluefan75 - 30 Sep 2004 15:39 GMT

I need to have a web site authenticate against an LDAP server for just the user
id and password. I cannot find anything out there to help me (for Coldfusion).
The users have the ability to bind but may not have the ability to read. This
may cause a problem with performing a query? I can't believe that this is that
difficult but I cannot figure it out. Any help would be greatly appreciated.

Thanks

Reply to this Message

Wimbo - 30 Sep 2004 17:33 GMT

> I need to have a web site authenticate against an LDAP server for just the user
> id and password. I cannot find anything out there to help me (for Coldfusion).
[quoted text clipped - 3 lines]
>
> Thanks

When it's possible to bind to the LDAP (using username and password) the
username and password are correct. Note that anonymous bind should not
allowed.

Most of the time that is sufficient. If you need to extract other
information (e.g. group membership etc.) than the user needs to be able
to read the LDAP (or at least the branch where the account is located).

Another possible solution is that you use an other account (with more
rights) to bind and do the searching in the LDAP. Drawback may be that
the passwords might be encrypted (hashed) in the LDAP and that the
hashing mechanism is different from the CF HASH method. In which case
you're not able to validate the password.

Wimbo

Reply to this Message

Webmaster Forum / ColdFusion / Advanced Techniques / September 2004

LDAP Authentication Assistance