|
|
Disclaimer:
These pages about different languages / apis / best practices were mostly jotted down quckily and rarely corrected afterwards. The languages / apis / best practices may have changed over time (e.g. the facebook api being a prime example), so what was documented as a good way to do something at the time might be outdated when you read it (some pages here are over 15 years old). Just as a reminder. jBoss developer notessome comments about jboss and ldap
jBPM (separate page)LDAPThis is an example that is working for authenticate and authorize to Active Directory, depends on your active directory setup of course.
<application-policy name = "ldap">
<authentication>
<login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">
<module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
<module-option name="java.naming.provider.url">ldap://somedomain.com:389/</module-option>
<module-option name="java.naming.security">simple</module-option>
<module-option name="bindDN">username@domain.com</module-option>
<module-option name="bindCredential">password</module-option>
<module-option name="baseCtxDN">OU=All Users,DC=DOMAIN,DC=COM</module-option>
<module-option name="baseFilter">(sAMAccountName={0})</module-option>
<-- Note: the next two lines are not typo,
they go over All Users group and sAMAccountName as well for the roles -->
. <module-option name="rolesCtxDN">OU=All Users,DC=DOMAIN,DC=COM</module-option>
<module-option name="roleFilter">(sAMAccountName={0})</module-option>
<module-option name="roleAttributeIsDN">true</module-option>
<module-option name="roleAttributeID">memberOf</module-option>
<module-option name="roleNameAttributeID">cn</module-option>
<module-option name="roleRecursion">-1</module-option>
</login-module>
</authentication>
</application-policy>
Good starting points for LDAP and jBoss:
http://wiki.jboss.org/wiki/Wiki.jsp?page=LdapExtLoginModule http://wiki.jboss.org/wiki/Wiki.jsp?page=LdapLoginModule Forum: Security & JAAS/JBoss More programming related pages |
|