Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ni_setpassword() and ni_setuser() authentication

NetInfo does not have read-access controls, so your experience with ni_setuser and ni_setpassword is the expected behavior.

We are gradually phasing out support for NetInfo in Mac OS X, and encouraging developers to switch to OpenDirectory for diretory service access. Behind the scenes, we are also gradually moving from NetInfo to LDAP as the native Mac OS X directory. LDAP generally supports richer access controls and a wider choice of authentication techniques than NetInfo, and these access controls and authentication methods are accessible through OpenDirectory APIs. NetInfo may be accessed through OpenDirectory as well, although it cannot provide read-access controls since they are not supported in the NetInfo server.

NetInfo will still be supported in Mac OS X 10.3 (Panther) but it will eventually go away. We are not planning any significant new feature development.

--
Marc Majka


On Tuesday, 22 July, 2003, at 6:28 PM, Justin wrote:

Hope this is the right list....

I've written a wrapper library for netinfo with the Zend API (for use with php) and I've been having problems authenticating users with the ni_setpassword() and ni_setuser() routines.

After making a connection to netinfo with ni_connect(), I make a call to ni_setpassword() and ni_setuser(). It seems like these routines don't authenticate but just switch the write calls to the user and password. I can make reads with the wrong user and password set but as soon as I make a write it errors out like expected, but only on writes and not reads. Is this a bug or a feature? Seems like a bug to me because I can make a read to /user/someuser with ni_read() and not even have priviledges to, even with a bogus username and password.

What would be the best way to implement authentication for both reads and writes to netinfo since ni_setpassword() and ni_setuser() doesn't authenticate??

Thanks

Justin Hannus
<email@hidden>.
_______________________________________________
darwin-development mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-development
Do not post admin requests to the list. They will be ignored.
_______________________________________________
darwin-development mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-development
Do not post admin requests to the list. They will be ignored.
References: 
 >ni_setpassword() and ni_setuser() authentication (From: Justin <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.