[et-mgmt-tools] [Cobbler] [PATCH] Cleaning up the authn_ldap module

[Bjorn Oglefjorn]

Issues addressed in the attached patch:
  - allow anonymous or bind'ed searches to obtain a user's full DN
  - allow for a configurable user search prefix (eg: 'uid=', 'cn=', etc...)

The following items (and their proposed defaults) are needed in
/var/lib/cobbler/settings to accommodate this patch:
ldap_anonymous_bind: 1
ldap_search_bind_dn: ''
ldap_search_passwd: ''
ldap_search_prefix: 'uid='

So if your LDAP server does not allow anonymous binds, you would need to
set:
ldap_anonymous_bind: 0
ldap_search_bind_dn: '<full_bind_user_dn_with_full_read_access_to_base_dn>'
ldap_search_passwd: '<passwd>'

Questions?  See me in #cobbler.

--Vito Laurenza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/et-mgmt-tools/attachments/20080401/de481859/attachment.htm>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: auth_ldap.py.diff.txt
URL: <http://listman.redhat.com/archives/et-mgmt-tools/attachments/20080401/de481859/attachment.txt>