JBoss Portal + LDAP

[alexdorand]

Has anyone integrated jboss portal with LDAP?
Where should I look to get some guidence on this?

[unibrew]

I can only say that few weeks ago I met someone who did such an integration, so, it is possible. Moreover, we will have similar integration for jboss.org.

Cheers
------------------------
Ryszard Kozmik
JBoss Forums
JBoss Labs

[keletappi]

Please give us more details how to do this. LDAP integration is one of the features that prevents me from using JBoss Portal it in production.

[bdaw]

ldap integration is on 2.6 roadmap. If you want do it yourself it's mostly about implementing UserModule and RoleModule to use LDAP. The simplest workaround for now is to just use LdapLoginModule instead of IdentityLoginModule for portal authentication in JBossSX and to have same users both in ldap and database.

[alexdorand]

do we have any date for 2.6 rollout?

[alexdorand]

I was trying to use LDAP + CAS + JBoss where jboss portal authentication happens through CAS which checks the LDAP for validity. Any idea how?

[bdaw]

There should be 2.6 alpha at the end of this year.
http://jira.jboss.com/jira/browse/JBPORTAL?report=com.atlassian.jira.plugin.system.project:roadmap-panel

I don't know CAS. JBoss Portal leverages JBossSX in application server (JAAS). Look at login-config.xml in jboss-portal.sar for authentication configuration.

[portalgeek]

LdapLoginModule is in java 6, which is still a beta-version. Correct me if i am wrong.

But i guess there is some documentation @ sun's website.http://java.sun.com/products/jndi/tutorial/ldap/index.html
tell how to integrate.

I was thinking, UserPortlet provided in the JBoss source is the right place to put this validation code.

Please correct me, if i am wrong. Someone who has done this before, please share your experience.

thanks

[bdaw]

Please look here:
http://wiki.jboss.org/wiki/Wiki.jsp?page=LdapLoginModule
http://wiki.jboss.org/wiki/Wiki.jsp?page=LdapExtLoginModule

There are example ldifs and configurations

One thing you need to know is that portal servlet is secured using "Authenticated" role that is assosiated with users dynamicly in current IdentityLoginModule. So all your users in ldap need to belong to this role to access portal.