[webteam] [Fwd: Re: auth against jabber.org database]

Zbyszek Żółkiewski zbyszek at toliman.pl
Sat Dec 1 06:24:45 CST 2007


and - its more secure than direct DB access, just think of XMPP servers as
decentralized authentication system

On 12/1/07, Zbyszek Żółkiewski <zbyszek at toliman.pl> wrote:
>
> Hi,
>
> Peter - why not use just XMPP for authentication? (like OpenID) ? - It is
> very simple, it is no matter where your account is registered,
> authentication module just check if your JID and password are correct and
> logging you on...just like that :)
>
>
> On 11/30/07, Peter Saint-Andre <stpeter at stpeter.im> wrote:
> >
> > Some slow progress to report...
> >
> > 1. I created a postgres user on athena (the xmpp server machine) for
> > this feature.
> >
> > 2. I set up permissions for this user in pg_hba.conf on athena.
> >
> > So this at least is a bit of forward movement.
> >
> > Next I will check into the information below...
> >
> > >     Hey guys, we figured out that we want to authenticate the new
> > >     jabber.org < http://jabber.org>
> > >     website against our existing database of IM users. The db is
> > postgres on
> > >     a different machine from the webserver. We want to make it
> > read-only so
> > >     that Drupal will check credentials against what we have in the IM
> > user
> > >     database (username and password). What is involved in writing a
> > new auth
> > >     module or hacking an existing module?
> > >
> > >
> > > hook_auth is the function you'll need to
> > > implement: http://api.drupal.org/api/function/hook_auth/5
> > >
> > > There are a variety of external authentication modules you can use as
> > a
> > > template:
> > > * http://drupal.org/project/cas
> > > *  http://drupal.org/project/cosign
> > > * http://drupal.org/project/facebook_auth
> > > * http://drupal.org/project/netforum_authentication
> > > < http://drupal.org/project/netforum_authentication>
> >
> >
> >
>
>
> --
> pozdrawiam,
> Zbyszek Żółkiewski




-- 
pozdrawiam,
Zbyszek Żółkiewski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.jabber.org/pipermail/webteam/attachments/20071201/2a11c062/attachment-0001.htm 


More information about the webteam mailing list