=============================
Authentication in directories
=============================

$Id: authentication.txt 8096 2004-05-06 16:58:56Z fguillaume $

Authentication
==============

A directory that supports it may be used for authentication.
Authentication means several thing:

- checking that an entry has a correct password associated to it,

- changing the password for an entry.

ZODB Directory
--------------

In the ZODB Directory, if a password field is specified, then the
directory will be used for authentication using this field.

Changing the password is currently done by modifying the entry directly.

LDAP Backing Directory
----------------------

If a password field is specified, then an LDAP bind will be used to
check the entry's password when authentication is required.

Changing the password is currently done by modifying the entry directly.
In the future it will be done by a special API that will use the
specified password field (only 'userPassword' makes sense for OpenLDAP).
