[tpop3d-discuss] ldap virtual auth plugin : near release

Paul Makepeace Paul.Makepeace at realprogrammers.com
Thu, 21 Feb 2002 02:43:51 -0800


On Thu, Feb 21, 2002 at 10:31:50AM +0000, Chris Lightfoot wrote:
> ... And a general question. Wouldn't it be better to allow
> the administrator to specify the whole LDAP filter
> strings, based on insertions like $(user) etc., in the
> config file? Then your scheme would be represented by
> 
>     auth-ldap-filter:   (mail=$(local_part)@$(domain))
> 
> and other users could invent whatever filters they wanted?

Another technique in LDAP is to store the filters themselves in some
part of the directory. This removes the need for config file editing,
server restarts etc and provides the opportunity for dynamic directory
structures.

[We used to also put stubs of Perl code in the directory but I wouldn't
offer that out-of-the-box :-)]

Paul

-- 
Paul Makepeace ....................................... http://paulm.com/

"What is the best way to cook a turkey? Sky blue sky."
   -- http://paulm.com/toys/surrealism/