[jboss-user] [Security & JAAS/JBoss] - LdapExtLoginModule, DatabaseServerLoginModule and password-s

[braca]

Hi,

I want to use LdapExtLoginModule for authenticating users and DatabaseServerLoginModule for retrieving roles. However, it doesn't work. I can't even login/authenticate. Without the Database-Module and getting some sample roles out of ldap is working. So what's wrong? Here's my login-config.xml:



  | <application-policy name = "jmx-console">
  | <authentication>
  | <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">
  | 	<module-option name="password-stacking">useFirstPass</module-option>
  | 	<module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
  | 	<module-option name="java.naming.provider.url">ldaps://10.31.4.4:636</module-option>
  | 	<module-option name="bindDN">cn=Test,ou=User</module-option> 
  | 	<module-option name="bindCredential">xxx</module-option>
  | 	<module-option name="baseCtxDN">ou=sample,o=orga</module-option>
  | 	<module-option name="baseFilter"><![CDATA[(&(cn={0})(objectClass=inetOrgPerson))]]></module-option>
  | 	<module-option name="searchTimeLimit">5000</module-option>
  | 	<module-option name="searchScope">SUBTREE_SCOPE</module-option>
  | </login-module>
  | <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
  | 	<module-option name="password-stacking">useFirstPass</module-option>
  | 	<module-option name = "dsJndiName">java:InformixDS</module-option>
  | 	<module-option name = "rolesQuery">
  | 	SELECT a.name, 'Roles'  \                                                     
  | 	FROM b_rolle a                      \                                
  | 	INNER JOIN b_benrolleorga b  \                                         
  | 	ON a.id = b.x_rolle_id                  \                            
  | 	WHERE (a.gueltigbis IS NULL OR a.gueltigbis ='' OR a.gueltigbis >= TODAY ) \	AND                                                                  \
  | 	user=?                                       	
  | 	</module-option>
  | </login-module>
  | </authentication>
  | </application-policy>
  | 
  | Exception is:
  | 2009-01-22 14:16:30,343 DEBUG [org.jboss.security.auth.spi.LdapExtLoginModule] Bad password for username=test
  | java.lang.NullPointerException
  | 	at javax.naming.InitialContext.getURLScheme(InitialContext.java:269)
  | 	at javax.naming.InitialContext.getURLOrDefaultInitCtx(InitialContext.java:318)
  | 	at javax.naming.directory.InitialDirContext.getURLOrDefaultInitDirCtx(InitialDirContext.java:87)
  | 	at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
  | 	at org.jboss.security.auth.spi.LdapExtLoginModule.rolesSearch(LdapExtLoginModule.java:421)
  | 	at org.jboss.security.auth.spi.LdapExtLoginModule.createLdapInitContext(LdapExtLoginModule.java:351)
  | 	at org.jboss.security.auth.spi.LdapExtLoginModule.validatePassword(LdapExtLoginModule.java:232)
  | 	at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:210)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:597)
  | ...
  | 

Thanks for an answer
braca

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4204003#4204003

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4204003