ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

2.1.x
Authentication Request DN
Mapping
Since Authenitcate Request DNs are not expected to exist in the Dit,
the DSA performs authentication request DN mapping based upon the
sasl-regexp directive.
A sasl-regexp directive takes two parameters -
Parameter #1 – A matching rule for authentication request DNs
It is possible to have multiple sasl-regexp declaration matching
different combinations of realms and methods.
Parameter #2 – A rewrite rule. This produces, based upon the values
in the authenitcation request DN either the correspdoning DN for an
actual object in the Dit or a search patten in LDAP URL format to
location an object within the Dit.
sasl-regexp
uid=(.*),cn=WHITEMICE.ORG,cn=gssapi,cn=auth
ldap://ldap-master/dc=whitemie,dc=org??sub?(&(uid=$1)(objectClass=account))