[Auth_ldap] password `recovery'

Rohit Kumar Mehta rohitm at engr.uconn.edu
Wed Apr 20 11:30:20 PDT 2005


I have a CGI-script (written in perl), that I which users can access 
provided they are
authenticated (using auth_ldap).  The goal of the CGI-script is to 
enable the user to update some
user settings (also through ldap using Net::LDAPS). 

It would be nice if when "user A" ran this web application, ldap server 
connections were all made as user A. 
Alternatively we could have the cgi-script run as an administrative 
user, but this leaves us all feeling
a little bit scared.  We don't really want to give more privileges than 
necessary to the web application.

So given this background, my question is this.  Is there a way for my 
cgi-script to `recover' the password
from auth_ldap?  Is it stored in a variable somewhere?  Or would I have 
to attempt some very clever tweaking
to make this happen.

I'd be grateful for any advice,

Thanks,

Rohit



More information about the Auth_ldap mailing list