Net::LDAP::Control::ProUxsyeArutCho(n3t)ributed Perl DocNuemte:n:tLaDtAiPo:n:Control::ProxyAuth(3)

NAME
       Net::LDAP::Control::ProxyAuth - LDAPv3 Proxy Authentication control
       object

SYNOPSIS
        use Net::LDAP;
        use Net::LDAP::Control::ProxyAuth;

        $ldap = Net::LDAP->new( "ldap.mydomain.eg" );

        $auth = Net::LDAP::Control::ProxyAuth->new( authzID => 'dn:cn=me,ou=people,o=myorg.com' );

        @args = ( base     => "cn=subnets,cn=sites,cn=configuration,$BASEDN",
                  scope    => "subtree",
                  filter   => "(objectClass=subnet)",
                  callback => \&processentry, # Call this sub for each entry
                  control  => [ $auth ],
        );

        while(1) {
          # Perform search
          my $mesg = $ldap->search( @args );

          # Only continue on LDAPSUCCESS
          $mesg->code and last;

        }

DESCRIPTION
       "Net::LDAP::Control::ProxyAuth" provides an interface for the creation
       and manipulation of objects that represent the
       "proxyauthorisationControl" as described by
       draft-weltman-ldapv3-proxy-XX.txt.

CCOONNSSTTRRUUCCTTOORR AARRGGUUMMEENNTTSS
       In addition to the constructor arguments described in
       Net::LDAP::Control the following are provided.

       authzID
           The authzID that is required. This is the identity we are
           requesting operations to use

       proxyDN
           In older versions of draft-weltman-ldapv3-proxy-XX.txt the value in
           the control and thus the constructor argument was a DN and was
           called "proxyDN". It served the same purpose as "authzID" in recent
           versions of "proxyauthorisationControl".

       PPlleeaassee nnoottee:: Unfortunately the OID and the encoding or the
       "proxyauthorisationControl" changed significantly in recent versions of
       draft-weltman-ldapv3-proxy-XX.txt.  Net::LDAP::Control::ProxyAuth tries
       to cope with that situation and changes the OID and encoding used
       depending on the constructor argument.

       With "proxyDN" as constructor argument the old OID and encoding are
       used, while with "authzID" as constructor argument the new OID and
       encoding are used.  Using this logic servers supporting either OID can
       be handled correctly.

MMEETTHHOODDSS
       As with Net::LDAP::Control each constructor argument described above is
       also available as a method on the object which will return the current
       value for the attribute if called without an argument, and set a new
       value for the attribute if called with an argument.

SEE ALSO
       Net::LDAP, Net::LDAP::Control,

AUTHOR       Olivier Dubois, Swift sa/nv based on Net::LDAP::Control::Page from
       Graham Barr .  Peter Marschall  added
       authzID extensions based on ideas from Graham Barr .

       Please report any bugs, or post any suggestions, to the perl-ldap
       mailing list 

COPYRIGHT
       Copyright (c) 2001-2004 Graham Barr. All rights reserved. This program
       is free software; you can redistribute it and/or modify it under the
       same terms as Perl itself.



perl v5.8.8                       2005-04-25  Net::LDAP::Control::ProxyAuth(3)