Announcement Announcement Module
No announcement yet.
Parameter for password Page Title Module
Move Remove Collapse
Conversation Detail Module
  • Filter
  • Time
  • Show
Clear All
new posts

  • Parameter for password

    Hi i am trying to understand how acegi fixes in LDAP, and i have a question, when i configure the connection with LDAP, how acegi takes the password and validates it with LDAP?

    the password must be specified travles in plain text so LDAP validates or it travels according with the encoder?... or the password doesnt travel ??



  • #2
    You'll probably need to ask on the Acegi forums for specifics, but in general, LDAP authentication is done by sending a connection (bind) request to the LDAP server with the user DN and password. If it gives an exception because the connection failed, it's a bad password. If it gives you a proper connection, the password worked.

    Unless otherwise specified, the DN and password are sent in clear text across the network.