1 Reply Latest reply on May 30, 2014 1:59 PM by jpsworkshop

    Configuring LDAP for AS7 management

    jpsworkshop

      Hello,

       

      I am trying to set up LDAP authentication for the management console in JBoss AS7. I have a vanilla install that I am running in standalone mode. I have followed the documentation (Use LDAP to Authenticate to the Management Interfaces) exactly, as well as other discussions on the forums (Login with LDAP into the management console). Unfortunately it doesn't seem to work for me. When I start JBoss I get no additional output in the logs pertaining to LDAP. When I attempt to log in to the management console it it appears to reject the login and asks again. However, I get no output in the logs again when this occurs. I have even bumped the logging level on org.jboss.security to the debug level and still nothing.

       

      My XML looks like:

       

      <management>

              <security-realms>

                ...

                  <security-realm name="ManagementRealmLDAP">

                      <authentication>

                          <ldap connection="ldap_connection" recursive="true" base-dn="OU=Users,DC=mycorp">

                              <advanced-filter filter="(&amp;(sAMAccountName={0})(memberOf=CN=admin,OU=JBoss,OU=Users,DC=mycorp))"/>

                          </ldap>

                      </authentication>

                  </security-realm>

              </security-realms>

              <outbound-connections>

                  <ldap name="ldap_connection" url="ldap://wins:389" search-dn="CN=admin,CN=Users,DC=mycorp" search-credential="secret"/>

              </outbound-connections>

              <management-interfaces>

                  <native-interface security-realm="ManagementRealmLDAP">

                      <socket-binding native="management-native"/>

                  </native-interface>

                  <http-interface security-realm="ManagementRealmLDAP">

                      <socket-binding http="management-http"/>

                  </http-interface>

              </management-interfaces>

          </management>

       

      Additionally, I have tried to set this up for applications by creating a security domain (as discussed here and here) but again I get nothing.

       

      Any insight is greatly appreciated,

       

      Jean-Philippe