Authentication API
DOMS will use the Fedora authentication system to authenticate users of the system. This means that authentication is handled by using the HTTP authentication mechanism used by Fedora. Best practice is using the function Fedora 3.0 API/Access#describeRepository to check credentials on first login.
In TestBed we will simply be using fedora-users.xml to define users. In the final production system, see http://www.fedora-commons.org/documentation/3.0b2/userdocs/server/security/securingrepo.html - we will use the LdapFilterForAttributes filter. However, since we use the Fedora authentication system, this will not change how you actually check credentials in any way.
It is acceptable that you need to log out, and back in, if you change the password in the LDAP.