Net::LDAP::Control::ProxyAuth(3)
NAME
Net::LDAP::Control::ProxyAuth - LDAPv3 Proxy Authentication control
object
SYNOPSIS
use Net::LDAP;
use Net::LDAP::Control::ProxyAuth;
$ldap = Net::LDAP->new( "ldap.mydomain.eg" );
$auth = Net::LDAP::Control::ProxyAuth->new( authzID => 'dn:cn=me,ou=people,o=myorg.com' );
@args = ( base => "cn=subnets,cn=sites,cn=configuration,$BASE_DN",
scope => "subtree",
filter => "(objectClass=subnet)",
callback => \&process_entry, # Call this sub for each entry
control => [ $auth ],
);
while(1) {
# Perform search
my $mesg = $ldap->search( @args );
# Only continue on LDAP_SUCCESS
$mesg->code and last;
}
DESCRIPTION
"Net::LDAP::Control::ProxyAuth" provides an interface for the creation
and manipulation of objects that represent the
"proxyauthorisationControl" as described by
draft-weltman-ldapv3-proxy-XX.txt.
CONSTRUCTOR ARGUMENTS
In addition to the constructor arguments described in
Net::LDAP::Control the following are provided.
authzID
The authzID that is required. This is the identity we are
requesting operations to use
proxyDN
In older versions of draft-weltman-ldapv3-proxy-XX.txt the value in
the control and thus the constructor argument was a DN and was
called "proxyDN". It served the same purpose as "authzID" in recent
versions of "proxyauthorisationControl".
Please note: Unfortunately the OID and the encoding or the
"proxyauthorisationControl" changed significantly in recent versions of
draft-weltman-ldapv3-proxy-XX.txt. Net::LDAP::Control::ProxyAuth tries
to cope with that situation and changes the OID and encoding used
depending on the constructor argument.
With "proxyDN" as constructor argument the old OID and encoding are
used, while with "authzID" as constructor argument the new OID and
encoding are used. Using this logic servers supporting either OID can
be handled correctly.
METHODS
As with Net::LDAP::Control each constructor argument described above is
also available as a method on the object which will return the current
value for the attribute if called without an argument, and set a new
value for the attribute if called with an argument.
SEE ALSO
Net::LDAP(3), Net::LDAP::Control(3)
AUTHOR
Olivier Dubois, Swift sa/nv based on Net::LDAP::Control::Page from
Graham Barr <gbarr@pobox.com>. Peter Marschall <peter@adpm.de> added
authzID extensions based on ideas from Graham Barr <gbarr@pobox.com>.
Please report any bugs, or post any suggestions, to the perl-ldap
mailing list <perl-ldap@perl.org>
COPYRIGHT
Copyright (c) 2001-2004 Graham Barr. All rights reserved. This program
is free software; you can redistribute it and/or modify it under the
same terms as Perl itself.
perl v5.10.0 2008-04-21 Net::LDAP::Control::ProxyAuth(3)
Mac OS X 10.6 - Generated Thu Sep 17 20:14:08 CDT 2009