Validating a user-ID, without sending the password.

Products

• LDAP SERVER FOR Z/OS

Issue/Introduction

From a JAVA application, (through LDAP) how can you validate if a user-ID is valid?

Environment

Release : 15.1

Component : LDAP SERVER FOR Z/OS

Resolution

With a valid ACID Ldap can do a search on an ACID that needs to be checked.

For example, to check for an ACID called NOTACID

run a search as listed like below and
this should return the does not exist message.

ldapsearch -x -D  cn=USER -w PASSWORD -H ldap://xxxde99:999 -s base -b "tssacid=notACID,tssadmingrp=acids,host=DEXX,o=ca,c=us"
ldap_bind: Success (0)
        additional info: TSS7000I XXXPA03 Last-Used 09 Mar 22 11:53 System=DEXX Facility=TSO
# extended LDIF
#
# LDAPv3
# base <tssacid=notACID,tssadmingrp=acids,host=DEXX,o=ca,c=us> with scope baseObject
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object
text: TSS0314E  ACID DOES NOT EXIST