[Opensource] User authentication

[Bjorn Granvik]

> You have to modify CheckLogin and UserInfo (?). How about at
> least a teaser and give up a list of modified classes so I don't have to
do so much
> legwork?

Here's the teaser ;-)
The expresso files we needed to change:
com
\---jcorporate
    \---expresso
        \---core
            |   expresso-config_4_0.dtd
            +---misc
            |       ConfigCacheManager.java
            |       ConfigExpresso.java
            |       ConfigManager.java
            +---security
            |       User.java
            \---servlet
                    CheckLogin.java

Moreover we needed to supply our own files to implement UserLDAP.java.

Our solution now is somewhat clunky, i.e. we need to copy a change to a user
or group to the ldap-server.
Changing a user is taken care of by the User class, but the role/group
mechanism is done by hand, i.e. an export page to ldap. So count in a
jsp-file to do this.

Generally speaking we don't want to maintain the changed Expresso files more
than necessary.
Expresso should be truly ldap pluggable, if you just have supplied the
correct ldap support (your UserLDAP et al).

> BTW, I consider this a must-have option for expresso.
I agree. As soon as we have some directions on this we'll let everyone know
(real soon:-).

/Bjorn