LDAP and portal 2.2.1RC1

[stefan_tausendpfund]

Hello,

after upgrading from portal 2.0.1 I configured my jboss 4.0.3SP1 with portal 2.2.1RC1 using LDAP authorisation.
In login-config.xml I added a new application-policy using
org.jboss.security.auth.spi.LdapExtLoginModule
and added the name to jboss-web.xml.
The LDAP authorisation works well but i get an exception from the PortalServlet:

org.jboss.portal.server.invocation.InvocationException: Cannot fetch user=fodisp
 at org.jboss.portal.core.aspects.server.UserInterceptor.invoke(UserInterceptor.java:114)
 at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
 at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
 at org.jboss.portal.server.aspects.server.SessionInvalidatorInterceptor.invoke(SessionInvalidatorInterceptor.java:87)
 at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
 at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
 at org.jboss.portal.core.aspects.server.TransactionInterceptor.invoke(TransactionInterceptor.java:75)
 at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
 at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
 at org.jboss.portal.server.invocation.Invocation.invoke(Invocation.java:175)
 at org.jboss.portal.server.servlet.PortalServlet.doGet(PortalServlet.java:221)
...
Caused by: org.jboss.portal.core.model.NoSuchUserException: No such user No such user fodisp
 at org.jboss.portal.core.impl.user.UserModuleImpl.findUserByUserName(UserModuleImpl.java:123)
 at org.jboss.portal.core.aspects.server.UserInterceptor.invoke(UserInterceptor.java:100)

It seams that the PortalServlet wants to load the user from an extra DB. Is there a way to disable this and what's this lookup for?

Thanks in advance
Stefan

[schnelzer]

Stefan,

The answer to you question is in this thread http://www.jboss.org/index.html?module=bb&op=viewtopic&t=75745. The thread should be here in the user forum, but it's not.

[stefan_tausendpfund]

Hello Doug,

thank you for the hint! But I don't understand right now the ModelLoginModule. Is this only used to check the existence of the user for the portal ? Or is it also used to check permissions using the groups of an user? If so I think it's not enough only to create the user and roles once. As roles and password of an user can change in LDAP you always have to replicate password and roles to the jboss portal.
Do I understand this right?


Thanks
Stefan

[dhartford]

psuedo-useful code example in the thread above.