I am trying to configure LDAP configuration the same way we configure it for our web applications:
- The server binds using the administrator account provided
- The server searches for
uid=$login
where$login
is the login the user used to login. If the LDAP entry is not found, then we error out. - Now that we have the DN, the server attempts to verify the password.
I have an additional caveat: the requirement that the $login
is a local user already. However, I think I'd be able to do that with a simple PAM modification. If someone has a suggestion, for this part, I'm open to it.
Is this possible? This does not match up with the traditional LDAP authentication implementations I've read in docs, articles and in SF.