[security-dev] Picketlink integration with IDM

Pedro Igor Silva psilva at redhat.com
Wed Nov 5 05:42:09 EST 2014


You can discard the warning message. The LDAP store does not support partitions at all.

Regarding your error message, make sure you have permissions to write to your ldap tree.

----- Original Message -----
From: "Snhp" <snhp20524 at gmail.com>
To: "Pedro Igor Silva" <psilva at redhat.com>
Cc: security-dev at lists.jboss.org
Sent: Tuesday, November 4, 2014 6:25:18 PM
Subject: Re: [security-dev] Picketlink integration with IDM

Iam able to connect to our own identity store but getting the below error 

Warning :
No default partition was created you may want to create one before starting your identity types.

Ldap error code 50  insufficient 'add' privilege to add entry 'cn=......

Sent from my iPhone

> On Oct 30, 2014, at 3:00 PM, Pedro Igor Silva <psilva at redhat.com> wrote:
> 
> We don't have any example for that, yet.
> 
> But I think you can create a LoginModule that uses PL IDM to connect to rht idp or ipa. In the next EAP release you'll be able to configure PL IDM using a subsystem and get a reference to the PartitionManager from your LoginModule.
> 
> But for now, I think you can try to build the partition manager inside your LM with all the necessary configuration to communicate with rht idm or ipa. Take a look at [1] about how to configure a LDAP identity store.
> 
> [1] https://github.com/jboss-developer/jboss-picketlink-quickstarts/tree/master/picketlink-authorization-idm-ldap.
> 
> ----- Original Message -----
> From: "Snhp" <snhp20524 at gmail.com>
> To: "Pedro Igor Silva" <psilva at redhat.com>
> Cc: security-dev at lists.jboss.org
> Sent: Thursday, October 30, 2014 4:49:18 PM
> Subject: Re: [security-dev] Picketlink integration with IDM
> 
> Iam new to Picketlink idm .. Can you someone guide me the design approach for the below requirement
> 
> 1) user login through web app using login page.
> 
> 2) web app should invoke picket link idm API's to connect to red hat idm or IPA server for validating user identities
> 
> Appreciate your comments and sample code if available
> 
> 
> 
> Sent from my iPhone
> 
>> On Oct 30, 2014, at 11:39 AM, Pedro Igor Silva <psilva at redhat.com> wrote:
>> 
>> I think you can get some guidance from our IT team.
>> 
>> ----- Original Message -----
>> From: "Snhp" <snhp20524 at gmail.com>
>> To: "Pedro Igor Silva" <psilva at redhat.com>
>> Cc: security-dev at lists.jboss.org
>> Sent: Thursday, October 30, 2014 12:10:59 PM
>> Subject: Re: [security-dev] Picketlink integration with IDM
>> 
>> My requirement is to authenticate users from red hat idm or Ipa 
>> 
>> Sent from my iPhone
>> 
>>> On Oct 30, 2014, at 9:40 AM, Pedro Igor Silva <psilva at redhat.com> wrote:
>>> 
>>> Do you mean using PL IDM to authenticate users from your PL IDP ?
>>> 
>>> ----- Original Message -----
>>> From: "Snhp" <snhp20524 at gmail.com>
>>> To: security-dev at lists.jboss.org
>>> Sent: Thursday, October 30, 2014 10:17:04 AM
>>> Subject: [security-dev] Picketlink integration with IDM
>>> 
>>> Hi All,
>>> 
>>> Can someone share examples on Picketlink integration with IDM (red hat) ?
>>> 
>>> Iam trying to configure IDM instead LDAP/Database..
>>> 
>>> Sent from my iPad
>>> _______________________________________________
>>> security-dev mailing list
>>> security-dev at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/security-dev


More information about the security-dev mailing list