Re: LDAP AUTH

[Mark W. <mew...@un...>]

Shain Miley wrote:

> Hi,
> I have two questions I am hoping you guys can help me with.
> 1)    I am trying to setup a web app to authenticate with perl-ldap
> (Net::LDAP). The user will submit a form that will contain their
> username and password.  I have written the perl code to contact the ldap
> server and it does the search...what I need to know is how to find out
> if the search was successful.  I don't need the server to return a list
> of usernames, I need to know if the username was found.  If is was found
> good...move on to the password if the username was not found then the
> does not need to check the password.

if ($mesg->count)
{
    do something
}



>
>
> 2)I am thinking about using the compare feature of perl-ldap for the
> password check but I can not find much documentation on it...does anyone
> know a good spot to look?

Most of the time people don't use compare they do a search, get the user's
DN & then do a bind. If you use compare, you're assuming you have access to
read passwords on the server & that you know how the passwords are hashed.
Then you have to hash the password and then do the compare.

A compare works like this:
my $mesg = $ldap->compare(dn,attr,value)

if the result code is 6 then the result is True (or is 5 true and 6 is
false?). Thus if compare is not equal to "TRUE" then the compare failed.

I have a compare example in the contrib directory in the ismember.pl
script.

Mark



>
> Thank you in advance for any help you can provide.
> Shain