2004-04-16 09:50:29 +08:00
|
|
|
.TH SLAPAUTH 8C "RELEASEDATE" "OpenLDAP LDVERSION"
|
2005-01-02 04:49:32 +08:00
|
|
|
.\" Copyright 2004-2005 The OpenLDAP Foundation All Rights Reserved.
|
2004-04-14 01:18:03 +08:00
|
|
|
.\" Copying restrictions apply. See COPYRIGHT/LICENSE.
|
|
|
|
|
.SH NAME
|
2004-04-16 09:50:29 +08:00
|
|
|
slapauth \- Check a list of string-represented IDs for authc/authz.
|
2004-04-14 01:18:03 +08:00
|
|
|
.SH SYNOPSIS
|
2004-04-16 09:50:29 +08:00
|
|
|
.B SBINDIR/slapauth
|
2004-04-14 01:18:03 +08:00
|
|
|
.B [\-v]
|
|
|
|
|
.B [\-d level]
|
|
|
|
|
.B [\-f slapd.conf]
|
2004-12-06 23:17:23 +08:00
|
|
|
.B [\-M mech]
|
|
|
|
|
.B [\-R realm]
|
2004-04-14 01:18:03 +08:00
|
|
|
.B [\-U authcID]
|
|
|
|
|
.B [\-X authzID]
|
|
|
|
|
.B ID [...]
|
|
|
|
|
.LP
|
|
|
|
|
.SH DESCRIPTION
|
|
|
|
|
.LP
|
2004-04-16 09:50:29 +08:00
|
|
|
.B Slapauth
|
2004-04-14 01:18:03 +08:00
|
|
|
is used to check the behavior of the slapd in mapping identities
|
|
|
|
|
for authentication and authorization purposes, as specified in
|
|
|
|
|
.BR slapd.conf (5).
|
|
|
|
|
It opens the
|
|
|
|
|
.BR slapd.conf (5)
|
|
|
|
|
configuration file, reads in the
|
2004-04-16 09:50:29 +08:00
|
|
|
.B authz-policy
|
2004-04-14 01:18:03 +08:00
|
|
|
and
|
2004-04-16 09:50:29 +08:00
|
|
|
.B authz-regexp
|
2004-04-14 01:18:03 +08:00
|
|
|
directives, and then parses the
|
|
|
|
|
.B ID
|
|
|
|
|
list given on the command-line.
|
|
|
|
|
.LP
|
|
|
|
|
.SH OPTIONS
|
|
|
|
|
.TP
|
|
|
|
|
.B \-v
|
|
|
|
|
enable verbose mode.
|
|
|
|
|
.TP
|
|
|
|
|
.BI \-d " level"
|
|
|
|
|
enable debugging messages as defined by the specified
|
|
|
|
|
.IR level .
|
|
|
|
|
.TP
|
|
|
|
|
.BI \-f " slapd.conf"
|
|
|
|
|
specify an alternative
|
|
|
|
|
.BR slapd.conf (5)
|
|
|
|
|
file.
|
|
|
|
|
.TP
|
2004-12-06 23:17:23 +08:00
|
|
|
.BI \-M " mech"
|
|
|
|
|
specify a mechanism.
|
|
|
|
|
.TP
|
|
|
|
|
.BI \-R " realm"
|
|
|
|
|
specify a realm.
|
|
|
|
|
.TP
|
2004-04-14 01:18:03 +08:00
|
|
|
.BI \-U " authcID"
|
|
|
|
|
specify an ID to be used as
|
|
|
|
|
.I authcID
|
|
|
|
|
throughout the test session.
|
|
|
|
|
If present, and if no
|
|
|
|
|
.B authzID
|
|
|
|
|
is given, the IDs in the ID list are treated as
|
|
|
|
|
.BR authzID .
|
|
|
|
|
.TP
|
|
|
|
|
.BI \-X " authzID"
|
|
|
|
|
specify an ID to be used as
|
|
|
|
|
.I authzID
|
|
|
|
|
throughout the test session.
|
|
|
|
|
If present, and if no
|
|
|
|
|
.B authcID
|
|
|
|
|
is given, the IDs in the ID list are treated as
|
|
|
|
|
.BR authcID .
|
|
|
|
|
If both
|
|
|
|
|
.I authcID
|
|
|
|
|
and
|
|
|
|
|
.I authzID
|
|
|
|
|
are given via command line switch, the ID list cannot be present.
|
|
|
|
|
.SH EXAMPLES
|
|
|
|
|
The command
|
|
|
|
|
.LP
|
|
|
|
|
.nf
|
|
|
|
|
.ft tt
|
2004-04-16 09:50:29 +08:00
|
|
|
SBINDIR/slapauth -f /ETCDIR/slapd.conf -v \\
|
2004-04-14 01:18:03 +08:00
|
|
|
-U bjorn -X u:bjensen
|
|
|
|
|
|
|
|
|
|
.ft
|
|
|
|
|
.fi
|
|
|
|
|
tests whether the user
|
|
|
|
|
.I bjorn
|
|
|
|
|
can assume the identity of the user
|
|
|
|
|
.I bjensen
|
|
|
|
|
provided the directives
|
|
|
|
|
.LP
|
|
|
|
|
.nf
|
|
|
|
|
.ft tt
|
2004-04-16 09:50:29 +08:00
|
|
|
authz-policy from
|
|
|
|
|
authz-regexp "^uid=([^,]+).*,cn=auth$"
|
|
|
|
|
"ldap:///dc=example,dc=net??sub?uid=$1"
|
2004-04-14 01:18:03 +08:00
|
|
|
|
|
|
|
|
.ft
|
|
|
|
|
.fi
|
|
|
|
|
are defined in
|
|
|
|
|
.BR slapd.conf (5).
|
|
|
|
|
.SH "SEE ALSO"
|
|
|
|
|
.BR ldap (3),
|
|
|
|
|
.BR slapd (8)
|
|
|
|
|
.BR slaptest (8)
|
|
|
|
|
.LP
|
|
|
|
|
"OpenLDAP Administrator's Guide" (http://www.OpenLDAP.org/doc/admin/)
|
|
|
|
|
.SH ACKNOWLEDGEMENTS
|
|
|
|
|
.B OpenLDAP
|
|
|
|
|
is developed and maintained by The OpenLDAP Project (http://www.openldap.org/).
|
|
|
|
|
.B OpenLDAP
|
|
|
|
|
is derived from University of Michigan LDAP 3.3 Release.
|
