LDAP credential

[Chad La Joie]

On Thu, Sep 20, 2012 at 9:46 AM, Bo Lorentsen <bl at moch.dk> wrote:
> 1. Does the idP make 2 look up in LDAP ? one using "uid" (configured in
> login) and the over using the resulting dn ?

Proper LDAP password authentication is a two step process.  1)
Connect, possibly with service specific credentials, and look up a
user's DN (their primary key in a LDAP directory) based on some
entered data.  2) Reconnect to the directory using the user's DN and
the entered password.

> 2. Where are the password meant to be ?

See above.

> 3. Are there any attribute mapping / storage needed before this could work ?

Attribute fetching and processing is a wholly separate affair and does
not affect authentication in any way.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered