Please Help - authenticating users via LdapLoginModule

[chrisbo]

Hi, I am new to JAAS/Ldap and I have a quick question regarding Ldap/LdapLoginModule.

It seems when I want a user to be authenticated, the user password has to match the rootpw located in my slapd.conf file as well as match the rootdn. I want to be able to authenticate multiple users based on individual passwords that are assigned to them, not by the rootpw and not the rootdn that is set up in the slapd.conf file. How to authenticate the individual based on credentials assigned to them with there own unique dn's and passwords rather than the rootpw and rootdn that is configured for the server. Is there a way do to this?

Your help is greatly appreciated.

Thanks.

[kchobantonov]

Well as I know the default ldap login module use the authentication based on bind operation to ldap server. This means that if you want to use this module you have to be able to login to server with supplied username and password form your client, e.g. users that be able to login to your site via ldap login module can login to your ldap server directly if they can access ldap server. So if you want more you have to code new ldap login module that login with root principal and credential and know where to look for user and so on. Then the users still can login to your application but can't login to the ldap because only root can that.

[aweissman]

yeah...specify ldap server credentials in login-config.xml