1Net::LDAP::Control::ProUxsyeArutCho(n3t)ributed Perl DocNuemte:n:tLaDtAiPo:n:Control::ProxyAuth(3)
2
3
4
6 Net::LDAP::Control::ProxyAuth - LDAPv3 Proxy Authentication control
7 object
8
10 use Net::LDAP;
11 use Net::LDAP::Control::ProxyAuth;
12
13 $ldap = Net::LDAP->new( "ldap.mydomain.eg" );
14
15 $auth = Net::LDAP::Control::ProxyAuth->new( authzID => 'dn:cn=me,ou=people,o=myorg.com' );
16
17 @args = ( base => "cn=subnets,cn=sites,cn=configuration,$BASE_DN",
18 scope => "subtree",
19 filter => "(objectClass=subnet)",
20 callback => \&process_entry, # Call this sub for each entry
21 control => [ $auth ],
22 );
23
24 while(1) {
25 # Perform search
26 my $mesg = $ldap->search( @args );
27
28 # Only continue on LDAP_SUCCESS
29 $mesg->code and last;
30
31 }
32
34 "Net::LDAP::Control::ProxyAuth" provides an interface for the creation
35 and manipulation of objects that represent the
36 "proxyauthorisationControl" as described by
37 draft-weltman-ldapv3-proxy-XX.txt.
38
40 In addition to the constructor arguments described in
41 Net::LDAP::Control the following are provided.
42
43 authzID
44 The authzID that is required. This is the identity we are
45 requesting operations to use
46
47 proxyDN
48 In older versions of draft-weltman-ldapv3-proxy-XX.txt the value in
49 the control and thus the constructor argument was a DN and was
50 called "proxyDN". It served the same purpose as "authzID" in recent
51 versions of "proxyauthorisationControl".
52
53 Please note: Unfortunately the OID and the encoding or the
54 "proxyauthorisationControl" changed significantly in recent versions of
55 draft-weltman-ldapv3-proxy-XX.txt. Net::LDAP::Control::ProxyAuth tries
56 to cope with that situation and changes the OID and encoding used
57 depending on the constructor argument.
58
59 With "proxyDN" as constructor argument the old OID and encoding are
60 used, while with "authzID" as constructor argument the new OID and
61 encoding are used. Using this logic servers supporting either OID can
62 be handled correctly.
63
65 As with Net::LDAP::Control each constructor argument described above is
66 also available as a method on the object which will return the current
67 value for the attribute if called without an argument, and set a new
68 value for the attribute if called with an argument.
69
71 Net::LDAP, Net::LDAP::Control,
72
74 Olivier Dubois, Swift sa/nv based on Net::LDAP::Control::Page from
75 Graham Barr <gbarr@pobox.com>. Peter Marschall <peter@adpm.de> added
76 authzID extensions based on ideas from Graham Barr <gbarr@pobox.com>.
77
78 Please report any bugs, or post any suggestions, to the perl-ldap
79 mailing list <perl-ldap@perl.org>
80
82 Copyright (c) 2001-2004 Graham Barr. All rights reserved. This program
83 is free software; you can redistribute it and/or modify it under the
84 same terms as Perl itself.
85
86
87
88perl v5.10.1 2010-03-12 Net::LDAP::Control::ProxyAuth(3)