Re: Dual login
Sebastien Manningham chez gmail <
mannings@...>
2010-12-04 20:28:25 GMT
Hello,
You can achieve that by changing the ldap search filter. For example,
in the PopProxyAService.cfg, I changed the search filter like this:
default:SearchFormat (| (uid=%U) (mail=%s))
This allow users to login with their uid or mail address. You could
add, let say, a custom ldap attribute called "aliasUid" and include
that attribute in the ldap filter.
Appart from MMP, you can do this in all services.
On Wed, Dec 1, 2010 at 3:02 PM, Kristin Hubner
<kristin.hubner@...> wrote:
>
> On Dec 1, 2010, at 6:46 AM, Kelly Caudill wrote:
>
>> Using multiple uid attributes is dangerous because the uid attribute is the basis for the user's
identity in the message store.
>
> ...Not just dangerous -- as of MS 6.2/6.3, such attempts just plain won't work.
>
> It was never truly "allowed" to have multiple uid values -- the Sun schema always
> said it was single-valued, though it wasn't (fully) enforced. As of MS 6.2, the
> MTA does some additional checks on the validity of user entries as regards
> uid and so will issue errors up-front about attempts to have multiple uid
> attributes, and as of MS 6.3 the MTA checks that the uid attribute only has a
> single value. You'll get an error on the address for such a user entry --
> offhand, I believe it's the "unknown or illegal user" error.
> (This is in contrast to older versions that might not warn of the error
> state of having multiple uids up-front -- but where instead "stange" results
> could occur for such user entries.)
>
>>
>> What is the business problem you are trying to solve that requires having the user log in to the same
account but do that login as different identities?
>
> As Kelly asks, this is the important question. If we know what the goal
> is, we might be able to make suggestions.
>
> Regards,
>
> Kristin
>
>>
>> Kelly
>>
>>
>> On 12/1/2010 9:22 AM, Meunier Alban wrote:
>>> you can use the fact that uid is multivalued on the user entry.
>>> It works even if is is unusual to have a naming attribute with more than one
>>> value (Sun and RFC compliant)
>>>
>>>
>>>
>>> dn: uid=john.doe,ou=People,o=abc,o=com
>>> objectclass: inetorgperson
>>> uid: john.doe
>>> uid: jdoe
>>> cn: John Doe
>>> sn: DOE
>>> givenname: John
>>>
>>>
>>>
>>>
>>> ALBAN
>>>
>>>
>>>
>>> On Dec 1, 2010, at 11:18 AM, Paul Davies wrote:
>>>
>>>> I'm looking for a solution allowing users to login with 2 logins to the same
>>>> account:
>>>>
>>>> jdoe
>>>> john.doe
>>>>
>>>> Would an alias work ?
>>>>
>>>> dn: uid=john.doe,ou=People,o=abc,o=com
>>>> objectclass: alias
>>>> objectclass: extensibleobject
>>>> uid: john.doe
>>>> aliasedObjectName: uid=jdoe,ou=People,o=abc,o=com
>>>>
>>>>
>>>> Or any other possible solution.......
>>>>
>>>> Cheers,
>>>>
>>>> Paul
>>>
>>
>> --
>> Oracle <http://www.oracle.com>
>> Kelly Caudill | Principal Technical Support Engineer
>> Phone: +17814422056 <tel:+17814422056>
>> Oracle Oracle Global Software Support : Comms Suite
>>
>> The *MSC* and *SunSolve* Will Soon Retire
>> Find out what you need to know about the migration to *_My Oracle Support_*
>> <http://www.oracle.com/us/support/044752.html>
>
>
--
Sébastien Manningham
mannings@...
RSS Feed