Authentication in directories

Revision: $Id$

Contents

1   Authentication

A directory that supports it may be used for authentication. Authentication means several things:

1.1   ZODB Directory

In the ZODB Directory, if a password field is specified, then the directory will be used for authentication using this field.

Changing the password is currently done by modifying the entry directly.

1.2   LDAP Backing Directory

If a password field is specified, then an LDAP bind will be used to check the entry's password when authentication is required.

Changing the password is currently done by modifying the entry directly. In the future it will be done by a special API that will use the specified password field (only "userPassword" makes sense for OpenLDAP).