[ome-devel] AD authentication

[Josh Moore]

Hi Yanling,

On Aug 9, 2013, at 8:15 PM, Yanling Liu wrote:

> Mark,
> 
> This is great news!
> 
> Also I would like to ask if it is possible to contribute back my Password
> Provider to OMERO so I don't have to reimplement it each time when I
> upgrade OMERO.

In general, it's definitely possible to contribute it back, but it depends on a number of factors. Perhaps keep us posted on your implementation so we can try to find a design that works for everyone.

> Thanks,
> Yanling

Thanks to you for looking into this!
~Josh

> 
> On Fri, Aug 9, 2013 at 8:47 AM, Mark Woodbridge <m.woodbridge at imperial.ac.uk
>> wrote:
> 
>> You should be able to implement your own Password Provider[1] that invokes
>> adinfo from Java. We subclass JdbcPasswordProvider, falling back to the
>> database for external users who aren't in our institutional directory.
>> 
>> Mark.
>> 
>> [1] http://www.openmicroscopy.org/**site/support/omero4/**
>> developers/Server/**PasswordProvider.html<http://www.openmicroscopy.org/site/support/omero4/developers/Server/PasswordProvider.html>
>> 
>> 
>> 
>> On 08/08/13 14:59, Yanling Liu wrote:
>> 
>>> Dear OME developers,
>>> 
>>> I'd like to ask if there is plan to support AD authentication on linux
>>> platform through Centrify (http://www.centrify.com/) tool. Some of our
>>> existing system utilize a small script to verify user credential against
>>> AD server:
>>> 
>>> #!/bin/bash
>>> 
>>> adinfo --user $1 --password $2 --auth > /dev/null
>>> if [ $? -ne 0 ]; then
>>>   exit 1
>>> else
>>>   echo "OK"
>>>   exit 0
>>> fi
>>> 
>>> 
>>> adinfo is a command line tool provided by Centrify.
>>> 
>>> Would it be possible to added this feature to OMERO? I know OMERO
>>> support LDAP but LDAP is not available in our organization.
>>> 
>>> Thanks,
>>> Yanling
>>>