Netscape NETSCAPE DIRECTORY SERVER 6.2 - GATEWAY CUSTOMIZATION, Manual

Page: 95 / 612

Writing Your Own Authentication Plug-in
Chapter 8 Defining Functions for Authentication 95
Writing Your Own Authentication Plug-in
A situation may arise in which you may want to write and implement your own
function for authentication; that is, replace the standard means of authentication
with your own function. You can write a pre-operation bind plug-in function (a
function that the server calls before processing an LDAP bind request) that
performs the authentication and bypasses the default bind functionality. For
details, see the next section, “Writing a Pre-Operation Bind Plug-in” on page 95.
Writing a Pre-Operation Bind Plug-in
You can define your own pre-operation bind plug-in function to authenticate
LDAP clients. The server will call your function during the authentication process
(in Step 9). Your function should return a non-zero value to bypass the default
backend bind function and the post-operation bind functions.
Note that this means that Step 10 through Step 12 are skipped. Your pre-operation
plug-in function is responsible for sending the result code to the client and for
setting the DN and authentication method for the connection.
Figure 8-1 summarizes the process of using a pre-operation bind plug-in function
to authenticate LDAP clients to the Directory Server.