[Repoze-dev] tg.repoze.who

[Chris McDonough]

percious wrote:
> Hey guys.
> 
> Nice work on repoze.who.  I am using it in my production tg2 server.

Thank you, and great.

> Our customer has a need to hook authentication into LDAP.  The idea is
> that LDAP would athenticate the user, and the LDAP username would then
> be used to perform a lookup on the TG database to get the user
> information for the TG session.
> 
> Is this something that repoze.who can do?

Sure.  You'd implement an "IAuthenticator" plugin ala 
<http://www.plope.com/static/misc/sphinxtest/intro.html#writing-an-authenticator-plugin> 
that checked against LDAP.  Then you'd write an "IMetadataProvider" plugin that 
put user info into the identity: 
<http://www.plope.com/static/misc/sphinxtest/intro.html#writing-a-metadata-provider-plugin>. 
  You'd then configure the who middleware with these plugins.

- C