ldap

How to check a username/password combination?


Using LDAP is checking a username/password as simple as attempting to bind as that user and noting the results, or is there a special LDAP "check password" function?

I'm trying to get a bit more "behind the scenes" understanding while working on a messy LDAP repository setup issue.

(Note: This is for situations in which the password is not stored as a hash in a custom property; that situation is easy to manage)


Solution

  • LDAP supports a compare of userPassword. You send the password, the server does the compare and returns true or false. This is the "not-requiring a login"-way to authenticate users.