LDAP Storage for Archetypes Ricardo Alves [email_address] Plone Conference 2009 - Budapest

What is LDAP? Protocol Operations to access directory services

Protocol

Operations to access directory services

What is a Directory Service? Data backend Hierarchical information Data more likely to read than written Data used by different, unrelated applications

Data backend

Hierarchical information

Data more likely to read than written

Data used by different, unrelated applications

Is LDAP an authentication system?

No!

Can we use it for authentication?

Yes we can!

Bind

LDAP and Plone Several Products: LDAPUserFolder PloneLDAP LDAPMultiPlugins … LDAP as an authentication backend

Several Products:

LDAPUserFolder

PloneLDAP

LDAPMultiPlugins

…

LDAP as an authentication backend

LDAP schema dn: cn=johndoe,dc=localhost,dc=localdomain objectClass: inetOrgPerson uid: johndoe cn: johndoe sn: John Doe businessCategory: comerce displayName:Jonh Doe homePhone: +000 111222333 homePostalAddress: Some street somewhere, 111 mail: mobile: +000 222222333

LDAP as content backend Examples: Contacts / address book Members as content (e.g. Membrane) … Problem: Doesn't support transactions!

Examples:

Contacts / address book

Members as content (e.g. Membrane)

…

Problem:

Doesn't support transactions!

LDAP connection Products.ldapconnection: Much like old-style SQL connection objects (Client-side) transaction support

Products.ldapconnection:

Much like old-style SQL connection objects

(Client-side) transaction support

LDAPStorage for Archetypes archetypes.ldapstorage ... StringField( 'name', storage = LDAPStorage( 'cn', # RDN attribute 'name', # At field Id 'cn', # LDAP attribute default_attrs = { 'objectClass': ['inetOrgPerson'], }, required_attrs = ['sn', 'cn'], ), ), ...

archetypes.ldapstorage

Issues Not really transactional LDAP and AT schema must be compatible

Not really transactional

LDAP and AT schema must be compatible

Future New z3 components (connection as an utility) More testing Improve storage implementation

New z3 components (connection as an utility)

More testing

Improve storage implementation

References Products.ldapconnection: http://pypi.python.org/pypi/Products.ldapconnection archetypes.ldapstorage: http://pypi.python.org/pypi/archetypes.ldapstorage

Products.ldapconnection:

http://pypi.python.org/pypi/Products.ldapconnection

archetypes.ldapstorage:

http://pypi.python.org/pypi/archetypes.ldapstorage

Questions? Ricardo Alves [email_address]