attribs from db what jaas uses

[Peter Schober]

* Szerb, Tamas <toma at rulez.org> [2014-06-25 23:50]:
> 1) Authenticate against database
> 2) If no user there, try to authenticate against LDAP
> 3) if succeeded, then fetch the attribute from the data source where the
> user authenticated.

Yes, we got that part. What you did not comment on, and what I fully
explained, in untechnical terms, in my second reply is that you CANNOT
do 1 and 2 UNLESS you're certain that usernames either (a) are unique
across both the RDBMS and LDAP, i.e., there is no username that exists
in both systems, or (b) that exist in both systems refer to the same
subject (person).

If you CANNOT guarantee (a) OR (b) above, you cannot use the proposed
authentication steps.

If you CAN guarantee (a) OR (b) above, then you don't need to do 3)
above and can pull attributes from all sources you have (RDBMS, LDAP).
-peter