posted 17 years ago
Hi guys,
I have a question more about design than code.
We want to use LDAP in our software but we have granular security - i.e. this person has access to these specific things. The specific things (such as administration of users, access to certain reports, etc) are specific to our software.
So, my questions are:
1. If a user exists in LDAP, how do you tell LDAP that they can log into the software? Do you usually start with an LDAP admin tool or get the software installer to update the LDAP record?
2. How are the specific security settings (for our application only) usually managed with LDAP? We don't want to write something that messes up the company LDAP with loads of software specific attributes - or is that how it's done? Do we create a sub-tree off the user for our application?
I guess what I'm saying is: I get the whole 'finding a user' thing with LDAP - can someone describe how it works in software that's a bit more complicated than 'Can they login or not?'.
Any help is much appreciated.
Steve
