2 Replies Latest reply on Jan 17, 2004 6:50 AM by elfuhrer

    LDAP Authentication

    Sudhakar Newbie

      Hi,
      I need to authenticate users based on the roles they r in and give them access based upon their rules.
      Can anyone help how to achieve this in JBoss. My configuration is
      Server : JBoss 3.0.0
      JDK : 1.3.1
      OS : Windows 2000
      LDAP : Lotus Notes 5.0

        • 1. Re: LDAP Authentication
          Andreas Newbie

          Hi,

          you must configure the login in login-config.xml. The following worked for me:

          <application-policy name="myapp">

          <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required">
          <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
          <module-option name="java.naming.provider.url">ldap://10.0.1.4:389/</module-option>
          <module-option name="java.naming.security.authentication">simple</module-option>
          <module-option name="principalDNPrefix">CN=</module-option>
          <module-option name="uidAttributeID">member</module-option>
          <module-option name="roleAttributeID">CN</module-option>
          <module-option name="principalDNSuffix">,O=your-certifier,C=your-certifier-country-code</module-option>
          <module-option name="rolesCtxDN"></module-option>
          <module-option name="matchOnUserDN">true</module-option>
          <module-option name="unauthenticatedIdentity">Web User</module-option>
          </login-module>

          </application-policy>

          Create groups in your domino directory and add the required people to the groups. Log in to JBoss using your Notes-CN, e.g. CN=Sam Cook/O=Acme/C=US log in using "Sam Cook" as username. You can use your domino internet password to log in. After adding groups and people you often have to rebuild the domino view index. Try "load updall names.nsf -R" on the server console. Then perform "dbcache flush" on the server console and everything should work fine.

          • 2. Re: LDAP Authentication
            elfuhrer Novice

            What about the roles? Where to specify them?