March 28th, 2005

LDAP support -- LiveJournal for the Enterprise(tm)!

We've had hooks in our code forever to do pluggable auth, but we've never written any plugs. Somebody recently mailed me about their corporate proxy which always sends the validated username of the remote user in its request headers, and wanted LJ to pick that up. I told them it'd be "easy", so I tested it by doing LDAP support.

Six Apart has an LDAP server here, so I tested against that, whatever it is.

This probably isn't production worthy (not totally using LDAP's power? I don't know.), but it works enough to show how easy it is. Anybody wanting to use this might want to do some more work probably. Do share, if you do.