Catalyst::Plugin::Authentication::Store::LDAP 0.0602

Catalyst::Plugin::Authentication::Store::LDAP allows authentication from an LDAP Directory.

SYNOPSIS
use Catalyst qw/
Authentication
Authentication::Store::LDAP
Authentication::Credential::Password
/;

__PACKAGE__->config(
'authentication' => {
'ldap' => {
'ldap_server' => 'ldap.yourcompany.com',
'ldap_server_options' => {
'timeout' => 30,
},
'binddn' => 'anonymous',
'bindpw' => 'dontcarehow',
'start_tls' => 1,
'start_tls_options' => {
'verify' => 'none',
},
'user_basedn' => 'ou=people,dc=yourcompany,dc=com',
'user_filter' => '(&(objectClass=posixAccount)(uid=%s))',
'user_scope' => 'one',
'user_field' => 'uid',
'user_search_options' => {
'deref' => 'always',
},
'use_roles' => 1,
'role_basedn' => 'ou=groups,dc=yourcompany,dc=com',
'role_filter' => '(&(objectClass=posixGroup)(memberUid=%s))',
'role_scope' => 'one',
'role_field' => 'uid',
'role_value' => 'dn',
'role_search_options' => {
'deref' => 'always',
},
}
},
);

sub login : Global {
my ( $self, $c ) = @_;

$c->login( $c->req->param("login"), $c->req->param("password"), );
$c->res->body("Welcome " . $c->user->username . "!");
}

This plugin uses Net::LDAP to let your application authenticate against an LDAP directory. It has a pretty high degree of flexibility, given the wide variation of LDAP directories and schemas from one system to another.

It authenticates users in two steps:

1) A search of the directory is performed, looking for a user object that matches the username you pass. This is done with the bind credentials supplied in the "binddn" and "bindpw" configuration options.
2) If that object is found, we then re-bind to the directory as that object. Assuming this is successful, the user is Authenticated.

Product's homepage

Requirements:

· Perl