Re: [Fwd] Net::LDAP question

[Chris R. <chr...@me...>]

Jim Harle <ha...@us...> wrote:
> Peter, just use $ENV{'REMOTE_ADDR'} to get this.  --Jim Harle
> 

Right, but that doesn't do the second part of what Peter wanted - he would
appear to have access controls based on the client's network address, and
so wants the web server to proxy the LDAP connection to the server making
it *appear* that the connection is coming from the machine the user is
running their web browser on. 

I'm not sure that's really something that an application like Net::LDAP can
do, it is more of a firewall/proxy thing. (Insert hand waving here.) There
may be other perl modules you could involve to do this however.

I'm even less sure that it is a secure thing to do. Can't IP addresses be
faked quite easily in HTTP requests? If so, you've just opened up your
directory to the outside world.

> On Thu, 21 Sep 2000, Graham Barr wrote:
> 
>> ----- Forwarded message from peter furmonavicius
>> <pet...@ya...> -----
>> 
>> Date: Thu, 21 Sep 2000 11:35:16 -0400
>> To: Graham Barr <gb...@po...>
>> From: peter furmonavicius <pet...@ya...>
>> Subject: Net::LDAP question
>> 
>> Graham, great stuff.  I was using your code from within a cgi 
>> application.  Is there any way to pass to to the LDAP server the IP 
>> address of the cgi caller, as opposed to the ip address of the 
>> machine running the cgi application (so I could use the LDAP acl's I 
>> wrote that check for local vs. remote/off-site LDAP lookups)?  In any 
>> case, thanks again for putting together such a terrific Perl module 
>> (which I also use under MacPerl by the way).
>> -- 
>> ------------------------------------------------------------------------
>> --- Yale University                   Peter Furmonavicius
>> Information Technology Services   Senior Research Programmer
>> 175 Whitney Avenue                mailto:pet...@ya...
>> P.O. Box 208276                   http://pantheon.yale.edu/~peter
>> New Haven, CT  06520-8276         phone: 203.432.6691   fax: 203.432.9216
>> 
>> ----- End forwarded message -----
>> 
> 



Cheers,

Chris