LDAP Authentication Enhancements

Database Access

Document - ID	Specification Owner	Last Change	Status
	Wind Li	04／3／5	Draft
Conforms to	
Applies to	Dbaccess and Connectivity
Task ID(s)	i17620
Category	Feature

Abstract

Currently, only anonymous login are supported in connecting to LDAP address in OOo. We should add authentication to it and we should make OOo has the ability to connect to an LDAP server using secure sockets layer.

i-Team Members (The specification owner is part of the i-Team)

	Name	E-mail Address
User Experience	Christian Jansen (CJ)	cj@openoffice.org
Development	Wind li(yl146652)	yl146652@openoffice.org
Quality Assurance	Marc Neumann (MSC)	msc@openoffice.org
Documentation	Uwe Fischer (UFI)	ufi@openoffice.org

Approved for Implementation

	Approved by	Date
User Experience	Christian Jansen	January 13, 2004
Development	Wind li(yl146652)	January 18, 2004
Quality Assurance	Marc Neumann (MSC)	January 13, 2004
Documentation	Uwe Fischer (UFI)	January 13, 2004
String Review	Elizabeth Matthis	February 16, 2004

Document Change History

Rev. Level	Change	Initials	Date
0.1	initial revision		03／12／17
1	Acceding to CJ's review, allign and reduce spaces between the controls and change some strings		04／1／18
1.1	Change "Use secure connection" checkbox behavior		04/03/05

Contents

Glossary	1

1	Motivation	1

2	Goals	1

3	Detailed Specification	1

4	Future Tasks	2

5	Notes	2

6	References	2

Glossary

Term	Description
LDAP	Lightweight Directory Access Protocol
Bind DN	Name to authenticate with the ldap server.
Username	Customarily we call “Bind DN” a username.
SSL	Short for Secure Sockets Layer . Users can use it to make a secure connection to ldap server.
Password	Password to authenticate with the server

Motivation

Make OOo support advanced LDAP users.

Goals

The major goal is to make users can login on to a ldap server which need authentication or using ssl.

Detailed Specification

Add Username, Password required and Use secure connection field to LDAP config page of DataSource Administrator Dialog

Illustration 1 Data Source Properties:LDAP Address Book

String list

Item	English	German	Comments
FixedText	~User name	~Benutzername	Already used by other datasource such as ODBC.
CheckBox	Pass~word required	Kenn~wort erforderlich	Already used by other datasource such as ODBC.
CheckBox	Use ~secure connection (SSL)	Sichere Verbindung (SSL) verwenden	Liz->Wind Li: Make sure there is a space between “connection” and “(SSL)”!
FixedText	Limit ~results to	Rückgabe beschränken auf	Liz->Wind Li: Strings cannot be separated on the UI, due to translation difficulties. Negatives are also not good to use. Please use this instead.

"Use secure connection(SSL)" checkbox behavior

Usually when user connect to ldap server using or not using secure connection, the ldap port number should be different. The default port for none secure connection is 389, for secure connection is 636. So when users change the the status of the "Use secure connection(SSL)" checkbox, the port number should be changed too. And when he/she changes back the checkbox, the port number should be changed back too. So the "Use secure connection(SSL)" checkbox behavior should be:

When user first checks the checkbox, the port number should be set to 636 and the last value of the port number should be remembered. Then every time user check/uncheck the checkbox, the port number should be resetted to the remembered value and the last port number should be remembered.

Tab Order

Key Board Shortcuts

Future Tasks

Notes

References

Secure Sockets Layer

http://wp.netscape.com/security/techbriefs/ssl.html

Ldap Logon and SSL Connection Enhancements

Page 3

http://dba.openoffice.org/specifications/Ldap_authentication.sxw

2003-12-13T18:42:10