5 Replies Latest reply on Nov 17, 2006 2:33 PM by kukeltje

    jbpm and LDAP!

    t3reini

      Hi,
      I have spent so much time to go through all the documentation and forum topics on the identity component but I have no idea how to link jbpm to a LDAP Database. I hope someone is willing to give me some hints because I need a prototype for my thesis.

      UseCase: I have Users in an LDAP-DB(OpenLDAP) and I'd like to use them within jbpm (instead of earnie, cookie monster, ...).

      As written in the doku I tried to extend ExpressionAssignmentHandler with my own implementation -> similar to
      http://www.jboss.com/index.html?module=bb&op=viewtopic&t=91941

      But what is the next step (the forum-thread never offered a solution)? I have already another class which implements ExpressionSession. I have also deleted the 3 lines in the hibernate.cfg.xml - the result is of course that the web-frontend does not work anymore :-(

      I would appreciate some help (an example would be amazing)!!

      thanks,
      reini

        • 1. Re: jbpm and LDAP!
          kukeltje

          Authentication is done via a normal jboss login module. That is the first step. Did you get that working? The moment you do, we'd be glad if you document that on the wiki. I'll help you (and myself) find out the next steps after that, since it is something I want to.

          • 2. Re: jbpm and LDAP!

            Roland:

            I'm interested in this topic, please let me know if I can help.

            Regards.

            • 3. Re: jbpm and LDAP!
              kukeltje

              I'll keep you posted

              • 4. Re: jbpm and LDAP!
                t3reini

                Hi,
                thanks for the quick answer! So we are talking about this:
                http://wiki.jboss.org/wiki/Wiki.jsp?page=LdapLoginModule ?
                It seems that I started at the wrong point :-( I'll keep you informed about my progress :-)
                regards,
                reini

                • 5. Re: jbpm and LDAP!
                  kukeltje

                  Yes, but no you did not start at the wrong point. You can have the authenication/authorisation (currently participant, administrator and manager) and roles/memberships at the processlevel (up to you) separated. I just assumed you would also want the users to login against the ldap server.

                  btw, only the 3.2 branche (just in alpha) uses authentication and authorization on the container. In 3.1 it is still 'custom'. The roles/memberships do not differ much between 3.1/3.2