Custom Login Module

[sekharm]

I am developing web site using Struts, EJB and Jboss 3.2.1

We want to implement Security using LDAP server, But we have 13000 users in LDAP server and all users wont access this site, So we want store only usersid’s in a Oracle database not password and maintain separate roles for web site which are not available in LDAP.

I want to implement security in the following way:

User ID: --->Check User ID in Oracle Database, If UserId exits then check password in LDAP server. If password is valid then get User Roles from Oracle Database and I want check user roles using JSP taglib <req:isUserInRole role="webadmin">

Suggestions please…..

[elfuhrer]

This is cumbersome. Just rely on LDAP for user authentication and disregard Oracle. you can synchronize later on Oracle and LDAP

[elfuhrer]

This is cumbersome. Just rely on LDAP for user authentication and disregard Oracle. you can synchronize later on Oracle and LDAP