Author: bdaw Date: 2010-01-05 14:28:49 -0500 (Tue, 05 Jan 2010) New Revision: 1166 Added: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/activedirectory-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/hibernate-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/installCS-ActiveDirectory.txt portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/jdbc-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/ldap-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/default-ldap.ldif portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-ldap-config.xml Removed: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/activedirectory-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/hibernate-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/installCS-ActiveDirectory.txt portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/jdbc-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/ldap-configuration.xml Modified: portal/trunk/component/identity/src/main/java/conf/portal/idm-config.xml portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMOrganizationServiceImpl.java portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMServiceImpl.java portal/trunk/component/test/organization/src/main/resources/conf/picketlink-idm-config.xml portal/trunk/pom.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/idm-configuration.xml portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-config.xml Log: - Update PicketLink IDM to 1.1.0.Beta1 - Sample LDAP configuration Modified: portal/trunk/component/identity/src/main/java/conf/portal/idm-config.xml =================================================================== --- portal/trunk/component/identity/src/main/java/conf/portal/idm-config.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/component/identity/src/main/java/conf/portal/idm-config.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -20,9 +20,9 @@ --> -<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_cr1" +<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_ga" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_cr1 identity-config.xsd"> + xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_ga identity-config.xsd"> <realms> <realm> <id>PortalRealm</id> Modified: portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMOrganizationServiceImpl.java =================================================================== --- portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMOrganizationServiceImpl.java 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMOrganizationServiceImpl.java 2010-01-05 19:28:49 UTC (rev 1166) @@ -99,7 +99,7 @@ } } - } + } public final org.picketlink.idm.api.Group getJBIDMGroup(String groupId) throws Exception { Modified: portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMServiceImpl.java =================================================================== --- portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMServiceImpl.java 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/PicketLinkIDMServiceImpl.java 2010-01-05 19:28:49 UTC (rev 1166) @@ -54,7 +54,7 @@ public static final String PARAM_JNDI_NAME_OPTION = "jndiName"; - public static final String DEFAULT_REALM_NAME_OPTION = "PortalRealm"; + public static final String REALM_NAME_OPTION = "portalRealm"; // We may have several portal containers thus we need one indentitySessionFactory per portal container // private static IdentitySessionFactory identitySessionFactory; @@ -62,7 +62,7 @@ private String config; - private String defaultRealmName = "PortalRealm"; + private String realmName = "PortalRealm"; private IdentityConfiguration identityConfiguration; @@ -78,7 +78,7 @@ { ValueParam config = initParams.getValueParam(PARAM_CONFIG_OPTION); ValueParam jndiName = initParams.getValueParam(PARAM_JNDI_NAME_OPTION); - ValueParam realmName = initParams.getValueParam(DEFAULT_REALM_NAME_OPTION); + ValueParam realmName = initParams.getValueParam(REALM_NAME_OPTION); if (config == null && jndiName == null) { @@ -87,7 +87,7 @@ } if (realmName != null) { - this.defaultRealmName = realmName.getValue(); + this.realmName = realmName.getValue(); } if (config != null) @@ -140,7 +140,7 @@ public IdentitySession getIdentitySession() throws Exception { - return getIdentitySessionFactory().getCurrentIdentitySession(defaultRealmName); + return getIdentitySessionFactory().getCurrentIdentitySession(realmName); } public IdentitySession getIdentitySession(String realm) throws Exception Modified: portal/trunk/component/test/organization/src/main/resources/conf/picketlink-idm-config.xml =================================================================== --- portal/trunk/component/test/organization/src/main/resources/conf/picketlink-idm-config.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/component/test/organization/src/main/resources/conf/picketlink-idm-config.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -20,9 +20,9 @@ --> -<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_cr1" +<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_ga" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_cr1 identity-config.xsd"> + xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_ga identity-config.xsd"> <realms> <realm> <id>PortalRealm</id> Modified: portal/trunk/pom.xml =================================================================== --- portal/trunk/pom.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/pom.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -46,7 +46,7 @@ <org.gatein.common.version>2.0.0-CR02</org.gatein.common.version> <org.gatein.wci.version>2.0.0-CR02</org.gatein.wci.version> <org.gatein.pc.version>2.1.0-CR01</org.gatein.pc.version> - <org.picketlink.idm>1.0.0.CR1</org.picketlink.idm> + <org.picketlink.idm>1.1.0.Beta1</org.picketlink.idm> <org.gatein.wsrp.version>1.0.0-Beta03</org.gatein.wsrp.version> <org.gatein.mop.version>1.0.0-Beta12</org.gatein.mop.version> <org.slf4j.version>1.5.6</org.slf4j.version> Modified: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -32,22 +32,24 @@ <import>war:/conf/database/database-configuration.xml</import> <import>war:/conf/jcr/jcr-configuration.xml</import> - <!--<import>war:/conf/organization/hibernate-configuration.xml</import>--> - <!--JBoss Identity IDM integration--> + + <!--PicketLink IDM integration--> <import>war:/conf/organization/idm-configuration.xml</import> - <!-- <import>war:/conf/jdbc-configuration.xml</import> --> + <!--Former exo implementations--> + <!--<import>war:/conf/organization/exo/hibernate-configuration.xml</import>--> + <!-- <import>war:/conf/organization/exo/jdbc-configuration.xml</import> --> <!--for organization service used active directory which is user lookup server --> <!-- - <import>war:/conf/activedirectory-configuration.xml</import> + <import>war:/conf/organization/exoactivedirectory-configuration.xml</import> --> - <!--for organization service used ldap server which is user lookup server --> <!-- <import>war:/conf/ldap-configuration.xml</import> --> <!-- <import>war:/conf/security-configuration.xml</import> --> + <import>war:/conf/organization/organization-configuration.xml</import> <import>war:/conf/jcr/component-plugins-configuration.xml</import> <import>war:/conf/mail/portal-mail-configuration.xml</import> Deleted: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/activedirectory-configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/activedirectory-configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/activedirectory-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -1,133 +0,0 @@ -<?xml version="1.0" encoding="ISO-8859-1"?> -<!-- - - Copyright (C) 2009 eXo Platform SAS. - - This is free software; you can redistribute it and/or modify it - under the terms of the GNU Lesser General Public License as - published by the Free Software Foundation; either version 2.1 of - the License, or (at your option) any later version. - - This software is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with this software; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA - 02110-1301 USA, or see the FSF site: http://www.fsf.org. - ---> - -<configuration - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" - xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> - <component> - <key>org.exoplatform.services.ldap.LDAPService</key> - <type>org.exoplatform.services.ldap.impl.LDAPServiceImpl</type> - <init-params> - <object-param> - <name>ldap.config</name> - <description>Default ldap config</description> - <object type="org.exoplatform.services.ldap.impl.LDAPConnectionConfig"> - <!-- for multiple ldap servers, use comma seperated list of host:port (Ex. ldap://127.0.0.1:389,10.0.0.1:389) --> - <!-- whether or not to enable ssl, if ssl is used ensure that the javax.net.ssl.keyStore & java.net.ssl.keyStorePassword properties are set --> - <!-- exo portal default installed javax.net.ssl.trustStore with file is java.home/lib/security/cacerts--> - <!-- ldap service will check protocol, if protocol is ldaps, ssl is enable (Ex. for enable ssl: ldaps://10.0.0.3:636 ;for disable ssl: ldap://10.0.0.3:389 ) --> - <!-- when enable ssl, ensure server name is *.directory and port (Ex. active.directory) --> - <field name="providerURL"><string>ldaps://10.0.0.3:636</string></field> - <field name="rootdn"><string>CN=Administrator,CN=Users, DC=exoplatform,DC=org</string></field> - <field name="password"><string>site</string></field> - - <field name="version"><string>3</string></field> - - <field name="minConnection"><int>5</int></field> - - <field name="maxConnection"><int>10</int></field> - - <field name="referralMode"><string>ignore</string></field> - - <field name="serverName"><string>active.directory</string></field> - - </object> - </object-param> - </init-params> - </component> - - <component> - <key>org.exoplatform.services.organization.OrganizationService</key> - <type>org.exoplatform.services.organization.ldap.OrganizationServiceImpl</type> - <component-plugins> - <component-plugin> - <name>init.service.listener</name> - <set-method>addListenerPlugin</set-method> - <type>org.exoplatform.services.organization.ldap.OrganizationLdapInitializer</type> - <description>this listener populate organization ldap service create default dn</description> - </component-plugin> - </component-plugins> - <init-params> - <object-param> - <name>ldap.attribute.mapping</name> - <description>ldap attribute mapping</description> - <object type="org.exoplatform.services.organization.ldap.LDAPAttributeMapping"> - <field name="userLDAPClasses"><string>top,person,organizationalPerson,user</string></field> - <field name="profileLDAPClasses"><string>top,organizationalPerson</string></field> - <field name="groupLDAPClasses"><string>top,organizationalUnit</string></field> - <field name="membershipTypeLDAPClasses"><string>top,group</string></field> - <field name="membershipLDAPClasses"><string>top,group</string></field> - - <field name="baseURL"><string>dc=exoplatform,dc=org</string></field> - <field name="groupsURL"><string>ou=groups,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="membershipTypeURL"><string>ou=memberships,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="userURL"><string>ou=users,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="profileURL"><string>ou=profiles,ou=portal,dc=exoplatform,dc=org</string></field> - - <field name="userAuthenticationAttr"><string>mail</string></field> - <field name="userUsernameAttr"><string>sAMAccountName</string></field> - <field name="userPassword"><string>unicodePwd</string></field> - <!--unicodePwd--> - <field name="userFirstNameAttr"><string>givenName</string></field> - <field name="userLastNameAttr"><string>sn</string></field> - <field name="userDisplayNameAttr"><string>displayName</string></field> - <field name="userMailAttr"><string>mail</string></field> - <field name="userObjectClassFilter"><string>objectClass=user</string></field> - - <field name="membershipTypeMemberValue"><string>member</string></field> - <field name="membershipTypeRoleNameAttr"><string>cn</string></field> - <field name="membershipTypeNameAttr"><string>cn</string></field> - <field name="membershipTypeObjectClassFilter"><string>objectClass=group</string></field> - <field name="membershiptypeObjectClass"><string>group</string></field> - - <field name="groupObjectClass"><string>organizationalUnit</string></field> - <field name="groupObjectClassFilter"><string>objectClass=organizationalUnit</string></field> - - <field name="membershipObjectClass"><string>group</string></field> - <field name="membershipObjectClassFilter"><string>objectClass=group</string></field> - - <field name="ldapCreatedTimeStampAttr"><string>createdTimeStamp</string></field> - <field name="ldapModifiedTimeStampAttr"><string>modifiedTimeStamp</string></field> - <field name="ldapDescriptionAttr"><string>description</string></field> - </object> - </object-param> - </init-params> - </component> - - <!--external-component-plugins> - <target-component>org.exoplatform.services.database.HibernateService</target-component> - <component-plugin> - <name>add.hibernate.mapping</name> - <set-method>addPlugin</set-method> - <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> - <init-params> - <values-param> - <name>hibernate.mapping</name> - <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> - </values-param> - </init-params> - </component-plugin> - </external-component-plugins--> - - <import>classpath:/conf/portal/organization-configuration.xml</import> -</configuration> Copied: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/activedirectory-configuration.xml (from rev 1155, portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/activedirectory-configuration.xml) =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/activedirectory-configuration.xml (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/activedirectory-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,133 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!-- + + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. + +--> + +<configuration + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" + xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> + <component> + <key>org.exoplatform.services.ldap.LDAPService</key> + <type>org.exoplatform.services.ldap.impl.LDAPServiceImpl</type> + <init-params> + <object-param> + <name>ldap.config</name> + <description>Default ldap config</description> + <object type="org.exoplatform.services.ldap.impl.LDAPConnectionConfig"> + <!-- for multiple ldap servers, use comma seperated list of host:port (Ex. ldap://127.0.0.1:389,10.0.0.1:389) --> + <!-- whether or not to enable ssl, if ssl is used ensure that the javax.net.ssl.keyStore & java.net.ssl.keyStorePassword properties are set --> + <!-- exo portal default installed javax.net.ssl.trustStore with file is java.home/lib/security/cacerts--> + <!-- ldap service will check protocol, if protocol is ldaps, ssl is enable (Ex. for enable ssl: ldaps://10.0.0.3:636 ;for disable ssl: ldap://10.0.0.3:389 ) --> + <!-- when enable ssl, ensure server name is *.directory and port (Ex. active.directory) --> + <field name="providerURL"><string>ldaps://10.0.0.3:636</string></field> + <field name="rootdn"><string>CN=Administrator,CN=Users, DC=exoplatform,DC=org</string></field> + <field name="password"><string>site</string></field> + + <field name="version"><string>3</string></field> + + <field name="minConnection"><int>5</int></field> + + <field name="maxConnection"><int>10</int></field> + + <field name="referralMode"><string>ignore</string></field> + + <field name="serverName"><string>active.directory</string></field> + + </object> + </object-param> + </init-params> + </component> + + <component> + <key>org.exoplatform.services.organization.OrganizationService</key> + <type>org.exoplatform.services.organization.ldap.OrganizationServiceImpl</type> + <component-plugins> + <component-plugin> + <name>init.service.listener</name> + <set-method>addListenerPlugin</set-method> + <type>org.exoplatform.services.organization.ldap.OrganizationLdapInitializer</type> + <description>this listener populate organization ldap service create default dn</description> + </component-plugin> + </component-plugins> + <init-params> + <object-param> + <name>ldap.attribute.mapping</name> + <description>ldap attribute mapping</description> + <object type="org.exoplatform.services.organization.ldap.LDAPAttributeMapping"> + <field name="userLDAPClasses"><string>top,person,organizationalPerson,user</string></field> + <field name="profileLDAPClasses"><string>top,organizationalPerson</string></field> + <field name="groupLDAPClasses"><string>top,organizationalUnit</string></field> + <field name="membershipTypeLDAPClasses"><string>top,group</string></field> + <field name="membershipLDAPClasses"><string>top,group</string></field> + + <field name="baseURL"><string>dc=exoplatform,dc=org</string></field> + <field name="groupsURL"><string>ou=groups,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="membershipTypeURL"><string>ou=memberships,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="userURL"><string>ou=users,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="profileURL"><string>ou=profiles,ou=portal,dc=exoplatform,dc=org</string></field> + + <field name="userAuthenticationAttr"><string>mail</string></field> + <field name="userUsernameAttr"><string>sAMAccountName</string></field> + <field name="userPassword"><string>unicodePwd</string></field> + <!--unicodePwd--> + <field name="userFirstNameAttr"><string>givenName</string></field> + <field name="userLastNameAttr"><string>sn</string></field> + <field name="userDisplayNameAttr"><string>displayName</string></field> + <field name="userMailAttr"><string>mail</string></field> + <field name="userObjectClassFilter"><string>objectClass=user</string></field> + + <field name="membershipTypeMemberValue"><string>member</string></field> + <field name="membershipTypeRoleNameAttr"><string>cn</string></field> + <field name="membershipTypeNameAttr"><string>cn</string></field> + <field name="membershipTypeObjectClassFilter"><string>objectClass=group</string></field> + <field name="membershiptypeObjectClass"><string>group</string></field> + + <field name="groupObjectClass"><string>organizationalUnit</string></field> + <field name="groupObjectClassFilter"><string>objectClass=organizationalUnit</string></field> + + <field name="membershipObjectClass"><string>group</string></field> + <field name="membershipObjectClassFilter"><string>objectClass=group</string></field> + + <field name="ldapCreatedTimeStampAttr"><string>createdTimeStamp</string></field> + <field name="ldapModifiedTimeStampAttr"><string>modifiedTimeStamp</string></field> + <field name="ldapDescriptionAttr"><string>description</string></field> + </object> + </object-param> + </init-params> + </component> + + <!--external-component-plugins> + <target-component>org.exoplatform.services.database.HibernateService</target-component> + <component-plugin> + <name>add.hibernate.mapping</name> + <set-method>addPlugin</set-method> + <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> + <init-params> + <values-param> + <name>hibernate.mapping</name> + <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> + </values-param> + </init-params> + </component-plugin> + </external-component-plugins--> + + <import>classpath:/conf/portal/organization-configuration.xml</import> +</configuration> Copied: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/hibernate-configuration.xml (from rev 1155, portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/hibernate-configuration.xml) =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/hibernate-configuration.xml (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/hibernate-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,50 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!-- + + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. + +--> + +<configuration + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" + xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> + <component> + <key>org.exoplatform.services.organization.OrganizationService</key> + <type>org.exoplatform.services.organization.hibernate.OrganizationServiceImpl</type> + </component> + <external-component-plugins> + <target-component>org.exoplatform.services.database.HibernateService</target-component> + <component-plugin> + <name>add.hibernate.mapping</name> + <set-method>addPlugin</set-method> + <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> + <init-params> + <values-param> + <name>hibernate.mapping</name> + <value>org/exoplatform/services/organization/impl/UserImpl.hbm.xml</value> + <value>org/exoplatform/services/organization/impl/MembershipImpl.hbm.xml</value> + <value>org/exoplatform/services/organization/impl/GroupImpl.hbm.xml</value> + <value>org/exoplatform/services/organization/impl/MembershipTypeImpl.hbm.xml</value> + <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> + </values-param> + </init-params> + </component-plugin> + </external-component-plugins> + <import>classpath:/conf/portal/organization-configuration.xml</import> +</configuration> \ No newline at end of file Copied: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/installCS-ActiveDirectory.txt (from rev 1155, portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/installCS-ActiveDirectory.txt) =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/installCS-ActiveDirectory.txt (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/installCS-ActiveDirectory.txt 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,39 @@ +==== + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. +==== + +Install CA Certificate + +- Installed an Enterprise CA , with the distinguished name of cn=portal,dc=exoplatform,dc=org" + +- By default, domain controllers automatically enroll for domain controller certificates once an Enterprise CA has been installed. The root certificate can be found in the root of the system drive (Eg. if the operating system has been installed in c:\windows, the cert will be found in c:\) + By default the certificate file is named <dns name of ca>_<name of cert>.crt + + +- Copy <dns name of ca>_<name of cert>.crt (example : Win2k3vm.exoplatform.org_portal.crt) to java.home/jre/lib/security + +- Goto java.home/jre/lib/security/ + +- Run: keytool -import -file <Win2k3vm.exoplatform.org_portal.crt> -keystore cacerts + +- Enter password : changeit + +- To delete CA Certificate : keytool -delete -alias mykey -keystore cacerts + + + Copied: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/jdbc-configuration.xml (from rev 1155, portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/jdbc-configuration.xml) =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/jdbc-configuration.xml (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/jdbc-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,85 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!-- + + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. + +--> + +<configuration + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" + xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> + <component> + <key>org.exoplatform.services.organization.OrganizationService</key> + <type>org.exoplatform.services.organization.jdbc.OrganizationServiceImpl</type> + </component> + + <external-component-plugins> + <target-component>org.exoplatform.services.listener.ListenerService</target-component> + + <component-plugin> + <name>organization.user.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.RemoveUserProfileListener</type> + </component-plugin> + + <component-plugin> + <name>organization.user.postCreate</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.CreateUserListener</type> + </component-plugin> + + <component-plugin> + <name>organization.user.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> + </component-plugin> + + <component-plugin> + <name>organization.user.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.portal.config.RemoveUserPortalConfigListener</type> + </component-plugin> + + <component-plugin> + <name>organization.membershipType.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> + </component-plugin> + + <component-plugin> + <name>organization.group.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> + </component-plugin> + + <component-plugin> + <name>organization.group.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.portal.config.RemoveGroupPortalConfigListener</type> + </component-plugin> + + <component-plugin> + <name>organization.group.preDelete</name> + <set-method>addListener</set-method> + <type>org.exoplatform.services.organization.jdbc.listeners.RemoveGroupListener</type> + </component-plugin> + + </external-component-plugins> + +</configuration> Copied: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/ldap-configuration.xml (from rev 1155, portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/ldap-configuration.xml) =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/ldap-configuration.xml (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/exo/ldap-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,167 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!-- + + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. + +--> + +<configuration + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" + xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> + <component> + <key>org.exoplatform.services.ldap.LDAPService</key> + <type>org.exoplatform.services.ldap.impl.LDAPServiceImpl</type> + <init-params> + <object-param> + <name>ldap.config</name> + <description>Default ldap config</description> + <object type="org.exoplatform.services.ldap.impl.LDAPConnectionConfig"> + + <!-- for multiple ldap servers, use comma seperated list of host:port (Ex. ldap://127.0.0.1:389,10.0.0.1:389) --> + <field name="providerURL"><string>ldap://127.0.0.1:389,10.0.0.1:389</string></field> + + <field name="rootdn"><string>CN=Manager,DC=exoplatform,DC=org</string></field> + + <field name="password"><string>secret</string></field> + + <field name="version"><string>3</string></field> + + <field name="minConnection"><int>5</int></field> + + <field name="maxConnection"><int>10</int></field> + + <field name="referralMode"><string>follow</string></field> + +<!-- + <field name="referralMode"><string>ignore</string></field> +--> + + <field name="serverName"><string>default</string></field> + +<!-- + LDAP server names : default, + active.directory, + open.ldap, + netscape.directory, + redhat.directory; +--> + + + </object> + </object-param> + </init-params> + </component> + + <component> + <key>org.exoplatform.services.organization.OrganizationService</key> + <type>org.exoplatform.services.organization.ldap.OrganizationServiceImpl</type> + <component-plugins> + <component-plugin> + <name>init.service.listener</name> + <set-method>addListenerPlugin</set-method> + <type>org.exoplatform.services.organization.ldap.OrganizationLdapInitializer</type> + <description>this listener populate organization ldap service create default dn</description> + </component-plugin> + </component-plugins> + <init-params> + <value-param> + <name>ldap.userDN.key</name> + <description>The key used to compose user DN</description> + <value>cn</value> + </value-param> + + <object-param> + <name>ldap.attribute.mapping</name> + <description>ldap attribute mapping</description> + <object type="org.exoplatform.services.organization.ldap.LDAPAttributeMapping"> + <field name="userLDAPClasses"><string>top,person,organizationalPerson,inetOrgPerson</string></field> + <field name="profileLDAPClasses"><string>top,organizationalPerson</string></field> + <field name="groupLDAPClasses"><string>top,organizationalUnit</string></field> + <field name="membershipTypeLDAPClasses"><string>top,organizationalRole</string></field> + <field name="membershipLDAPClasses"><string>top,groupOfNames</string></field> + + <field name="baseURL"><string>dc=exoplatform,dc=org</string></field> + <field name="groupsURL"><string>ou=groups,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="membershipTypeURL"><string>ou=memberships,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="userURL"><string>ou=users,ou=portal,dc=exoplatform,dc=org</string></field> + <field name="profileURL"><string>ou=profiles,ou=portal,dc=exoplatform,dc=org</string></field> + + <field name="userUsernameAttr"><string>uid</string></field> + <field name="userPassword"><string>userPassword</string></field> + <field name="userFirstNameAttr"><string>givenName</string></field> + <field name="userLastNameAttr"><string>sn</string></field> + <field name="userDisplayNameAttr"><string>displayName</string></field> + <field name="userMailAttr"><string>mail</string></field> + <field name="userObjectClassFilter"><string>objectClass=person</string></field> + + <field name="membershipTypeMemberValue"><string>member</string></field> + <field name="membershipTypeRoleNameAttr"><string>cn</string></field> + <field name="membershipTypeNameAttr"><string>cn</string></field> + <field name="membershipTypeObjectClassFilter"><string>objectClass=organizationalRole</string></field> + <field name="membershiptypeObjectClass"><string>organizationalRole</string></field> + + <field name="groupObjectClass"><string>organizationalUnit</string></field> + <field name="groupObjectClassFilter"><string>objectClass=organizationalUnit</string></field> + + <field name="membershipObjectClass"><string>groupOfNames</string></field> + <field name="membershipObjectClassFilter"><string>objectClass=groupOfNames</string></field> + + <field name="ldapCreatedTimeStampAttr"><string>createdTimeStamp</string></field> + <field name="ldapModifiedTimeStampAttr"><string>modifiedTimeStamp</string></field> + <field name="ldapDescriptionAttr"><string>description</string></field> + </object> + </object-param> + </init-params> + </component> + + <external-component-plugins> + <target-component>org.exoplatform.services.database.HibernateService</target-component> + <component-plugin> + <name>add.hibernate.mapping</name> + <set-method>addPlugin</set-method> + <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> + <init-params> + <values-param> + <name>hibernate.mapping</name> + <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> + </values-param> + </init-params> + </component-plugin> + </external-component-plugins> + + <!-- for ldap clean database + <external-component-plugins> + <target-component>org.exoplatform.services.ldap.LDAPService</target-component> + <component-plugin> + <name>delete.object</name> + <set-method>addDeleteObject</set-method> + <type>org.exoplatform.services.ldap.DeleteObjectCommand</type> + <init-params> + <values-param> + <name>objects.to.delete</name> + <value>cn=demo,ou=users,ou=portal,dc=exoplatform,dc=org</value> + <value>cn=test,ou=users,ou=portal,dc=exoplatform,dc=org</value> + <value>cn=Benj,ou=users,ou=portal,dc=exoplatform,dc=org</value> + <value>cn=tuan,ou=users,ou=portal,dc=exoplatform,dc=org</value> + </values-param> + </init-params> + </component-plugin> + </external-component-plugins> + --> +</configuration> Deleted: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/hibernate-configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/hibernate-configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/hibernate-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -1,50 +0,0 @@ -<?xml version="1.0" encoding="ISO-8859-1"?> -<!-- - - Copyright (C) 2009 eXo Platform SAS. - - This is free software; you can redistribute it and/or modify it - under the terms of the GNU Lesser General Public License as - published by the Free Software Foundation; either version 2.1 of - the License, or (at your option) any later version. - - This software is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with this software; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA - 02110-1301 USA, or see the FSF site: http://www.fsf.org. - ---> - -<configuration - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" - xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> - <component> - <key>org.exoplatform.services.organization.OrganizationService</key> - <type>org.exoplatform.services.organization.hibernate.OrganizationServiceImpl</type> - </component> - <external-component-plugins> - <target-component>org.exoplatform.services.database.HibernateService</target-component> - <component-plugin> - <name>add.hibernate.mapping</name> - <set-method>addPlugin</set-method> - <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> - <init-params> - <values-param> - <name>hibernate.mapping</name> - <value>org/exoplatform/services/organization/impl/UserImpl.hbm.xml</value> - <value>org/exoplatform/services/organization/impl/MembershipImpl.hbm.xml</value> - <value>org/exoplatform/services/organization/impl/GroupImpl.hbm.xml</value> - <value>org/exoplatform/services/organization/impl/MembershipTypeImpl.hbm.xml</value> - <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> - </values-param> - </init-params> - </component-plugin> - </external-component-plugins> - <import>classpath:/conf/portal/organization-configuration.xml</import> -</configuration> \ No newline at end of file Modified: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/idm-configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/idm-configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/idm-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -34,6 +34,11 @@ <name>config</name> <value>war:/conf/organization/picketlink-idm/picketlink-idm-config.xml</value> </value-param> + <value-param> + <name>portalRealm</name> + <value>realm${container.name.suffix}</value> + </value-param> + </init-params> </component> Deleted: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/installCS-ActiveDirectory.txt =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/installCS-ActiveDirectory.txt 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/installCS-ActiveDirectory.txt 2010-01-05 19:28:49 UTC (rev 1166) @@ -1,39 +0,0 @@ -==== - Copyright (C) 2009 eXo Platform SAS. - - This is free software; you can redistribute it and/or modify it - under the terms of the GNU Lesser General Public License as - published by the Free Software Foundation; either version 2.1 of - the License, or (at your option) any later version. - - This software is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with this software; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA - 02110-1301 USA, or see the FSF site: http://www.fsf.org. -==== - -Install CA Certificate - -- Installed an Enterprise CA , with the distinguished name of cn=portal,dc=exoplatform,dc=org" - -- By default, domain controllers automatically enroll for domain controller certificates once an Enterprise CA has been installed. The root certificate can be found in the root of the system drive (Eg. if the operating system has been installed in c:\windows, the cert will be found in c:\) - By default the certificate file is named <dns name of ca>_<name of cert>.crt - - -- Copy <dns name of ca>_<name of cert>.crt (example : Win2k3vm.exoplatform.org_portal.crt) to java.home/jre/lib/security - -- Goto java.home/jre/lib/security/ - -- Run: keytool -import -file <Win2k3vm.exoplatform.org_portal.crt> -keystore cacerts - -- Enter password : changeit - -- To delete CA Certificate : keytool -delete -alias mykey -keystore cacerts - - - Deleted: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/jdbc-configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/jdbc-configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/jdbc-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -1,85 +0,0 @@ -<?xml version="1.0" encoding="ISO-8859-1"?> -<!-- - - Copyright (C) 2009 eXo Platform SAS. - - This is free software; you can redistribute it and/or modify it - under the terms of the GNU Lesser General Public License as - published by the Free Software Foundation; either version 2.1 of - the License, or (at your option) any later version. - - This software is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with this software; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA - 02110-1301 USA, or see the FSF site: http://www.fsf.org. - ---> - -<configuration - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" - xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> - <component> - <key>org.exoplatform.services.organization.OrganizationService</key> - <type>org.exoplatform.services.organization.jdbc.OrganizationServiceImpl</type> - </component> - - <external-component-plugins> - <target-component>org.exoplatform.services.listener.ListenerService</target-component> - - <component-plugin> - <name>organization.user.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.RemoveUserProfileListener</type> - </component-plugin> - - <component-plugin> - <name>organization.user.postCreate</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.CreateUserListener</type> - </component-plugin> - - <component-plugin> - <name>organization.user.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> - </component-plugin> - - <component-plugin> - <name>organization.user.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.portal.config.RemoveUserPortalConfigListener</type> - </component-plugin> - - <component-plugin> - <name>organization.membershipType.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> - </component-plugin> - - <component-plugin> - <name>organization.group.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.RemoveMembershipListener</type> - </component-plugin> - - <component-plugin> - <name>organization.group.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.portal.config.RemoveGroupPortalConfigListener</type> - </component-plugin> - - <component-plugin> - <name>organization.group.preDelete</name> - <set-method>addListener</set-method> - <type>org.exoplatform.services.organization.jdbc.listeners.RemoveGroupListener</type> - </component-plugin> - - </external-component-plugins> - -</configuration> Deleted: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/ldap-configuration.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/ldap-configuration.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/ldap-configuration.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -1,167 +0,0 @@ -<?xml version="1.0" encoding="ISO-8859-1"?> -<!-- - - Copyright (C) 2009 eXo Platform SAS. - - This is free software; you can redistribute it and/or modify it - under the terms of the GNU Lesser General Public License as - published by the Free Software Foundation; either version 2.1 of - the License, or (at your option) any later version. - - This software is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with this software; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA - 02110-1301 USA, or see the FSF site: http://www.fsf.org. - ---> - -<configuration - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd http://www.exoplaform.org/xml/ns/kernel_1_0.xsd" - xmlns="http://www.exoplaform.org/xml/ns/kernel_1_0.xsd"> - <component> - <key>org.exoplatform.services.ldap.LDAPService</key> - <type>org.exoplatform.services.ldap.impl.LDAPServiceImpl</type> - <init-params> - <object-param> - <name>ldap.config</name> - <description>Default ldap config</description> - <object type="org.exoplatform.services.ldap.impl.LDAPConnectionConfig"> - - <!-- for multiple ldap servers, use comma seperated list of host:port (Ex. ldap://127.0.0.1:389,10.0.0.1:389) --> - <field name="providerURL"><string>ldap://127.0.0.1:389,10.0.0.1:389</string></field> - - <field name="rootdn"><string>CN=Manager,DC=exoplatform,DC=org</string></field> - - <field name="password"><string>secret</string></field> - - <field name="version"><string>3</string></field> - - <field name="minConnection"><int>5</int></field> - - <field name="maxConnection"><int>10</int></field> - - <field name="referralMode"><string>follow</string></field> - -<!-- - <field name="referralMode"><string>ignore</string></field> ---> - - <field name="serverName"><string>default</string></field> - -<!-- - LDAP server names : default, - active.directory, - open.ldap, - netscape.directory, - redhat.directory; ---> - - - </object> - </object-param> - </init-params> - </component> - - <component> - <key>org.exoplatform.services.organization.OrganizationService</key> - <type>org.exoplatform.services.organization.ldap.OrganizationServiceImpl</type> - <component-plugins> - <component-plugin> - <name>init.service.listener</name> - <set-method>addListenerPlugin</set-method> - <type>org.exoplatform.services.organization.ldap.OrganizationLdapInitializer</type> - <description>this listener populate organization ldap service create default dn</description> - </component-plugin> - </component-plugins> - <init-params> - <value-param> - <name>ldap.userDN.key</name> - <description>The key used to compose user DN</description> - <value>cn</value> - </value-param> - - <object-param> - <name>ldap.attribute.mapping</name> - <description>ldap attribute mapping</description> - <object type="org.exoplatform.services.organization.ldap.LDAPAttributeMapping"> - <field name="userLDAPClasses"><string>top,person,organizationalPerson,inetOrgPerson</string></field> - <field name="profileLDAPClasses"><string>top,organizationalPerson</string></field> - <field name="groupLDAPClasses"><string>top,organizationalUnit</string></field> - <field name="membershipTypeLDAPClasses"><string>top,organizationalRole</string></field> - <field name="membershipLDAPClasses"><string>top,groupOfNames</string></field> - - <field name="baseURL"><string>dc=exoplatform,dc=org</string></field> - <field name="groupsURL"><string>ou=groups,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="membershipTypeURL"><string>ou=memberships,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="userURL"><string>ou=users,ou=portal,dc=exoplatform,dc=org</string></field> - <field name="profileURL"><string>ou=profiles,ou=portal,dc=exoplatform,dc=org</string></field> - - <field name="userUsernameAttr"><string>uid</string></field> - <field name="userPassword"><string>userPassword</string></field> - <field name="userFirstNameAttr"><string>givenName</string></field> - <field name="userLastNameAttr"><string>sn</string></field> - <field name="userDisplayNameAttr"><string>displayName</string></field> - <field name="userMailAttr"><string>mail</string></field> - <field name="userObjectClassFilter"><string>objectClass=person</string></field> - - <field name="membershipTypeMemberValue"><string>member</string></field> - <field name="membershipTypeRoleNameAttr"><string>cn</string></field> - <field name="membershipTypeNameAttr"><string>cn</string></field> - <field name="membershipTypeObjectClassFilter"><string>objectClass=organizationalRole</string></field> - <field name="membershiptypeObjectClass"><string>organizationalRole</string></field> - - <field name="groupObjectClass"><string>organizationalUnit</string></field> - <field name="groupObjectClassFilter"><string>objectClass=organizationalUnit</string></field> - - <field name="membershipObjectClass"><string>groupOfNames</string></field> - <field name="membershipObjectClassFilter"><string>objectClass=groupOfNames</string></field> - - <field name="ldapCreatedTimeStampAttr"><string>createdTimeStamp</string></field> - <field name="ldapModifiedTimeStampAttr"><string>modifiedTimeStamp</string></field> - <field name="ldapDescriptionAttr"><string>description</string></field> - </object> - </object-param> - </init-params> - </component> - - <external-component-plugins> - <target-component>org.exoplatform.services.database.HibernateService</target-component> - <component-plugin> - <name>add.hibernate.mapping</name> - <set-method>addPlugin</set-method> - <type>org.exoplatform.services.database.impl.AddHibernateMappingPlugin</type> - <init-params> - <values-param> - <name>hibernate.mapping</name> - <value>org/exoplatform/services/organization/impl/UserProfileData.hbm.xml</value> - </values-param> - </init-params> - </component-plugin> - </external-component-plugins> - - <!-- for ldap clean database - <external-component-plugins> - <target-component>org.exoplatform.services.ldap.LDAPService</target-component> - <component-plugin> - <name>delete.object</name> - <set-method>addDeleteObject</set-method> - <type>org.exoplatform.services.ldap.DeleteObjectCommand</type> - <init-params> - <values-param> - <name>objects.to.delete</name> - <value>cn=demo,ou=users,ou=portal,dc=exoplatform,dc=org</value> - <value>cn=test,ou=users,ou=portal,dc=exoplatform,dc=org</value> - <value>cn=Benj,ou=users,ou=portal,dc=exoplatform,dc=org</value> - <value>cn=tuan,ou=users,ou=portal,dc=exoplatform,dc=org</value> - </values-param> - </init-params> - </component-plugin> - </external-component-plugins> - --> -</configuration> Added: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/default-ldap.ldif =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/default-ldap.ldif (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/default-ldap.ldif 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,35 @@ +dn: o=gatein,dc=example,dc=com +objectclass: top +objectclass: organization +o: gatein + +dn: o=portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organization +o: portal + +dn: ou=People,o=portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organizationalUnit +ou: People + +dn: ou=Groups,o=portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organizationalUnit +ou: Groups + +dn: o=sample-portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organization +o: sample-portal + +dn: ou=People,o=sample-portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organizationalUnit +ou: People + +dn: ou=Groups,o=sample-portal,o=gatein,dc=example,dc=com +objectclass: top +objectclass: organizationalUnit +ou: Groups + Modified: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-config.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-config.xml 2010-01-05 15:21:02 UTC (rev 1165) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-config.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -20,76 +20,106 @@ --> -<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_cr1" +<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_ga" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_cr1 identity-config.xsd"> - <realms> - <realm> - <id>PortalRealm</id> - <repository-id-ref>PortalRepository</repository-id-ref> - <identity-type-mappings> - <user-mapping>USER</user-mapping> - </identity-type-mappings> - </realm> - </realms> - <repositories> - <repository> - <id>PortalRepository</id> - <class>org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository</class> - <external-config/> - <default-identity-store-id>HibernateStore</default-identity-store-id> - <default-attribute-store-id>HibernateStore</default-attribute-store-id> - </repository> - </repositories> - <stores> - <attribute-stores/> - <identity-stores> - <identity-store> - <id>HibernateStore</id> - <class>org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl</class> - <external-config/> - <supported-relationship-types> - <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> - <relationship-type>JBOSS_IDENTITY_ROLE</relationship-type> - </supported-relationship-types> - <supported-identity-object-types> - <identity-object-type> - <name>USER</name> - <relationships/> - <credentials> - <credential-type>PASSWORD</credential-type> - </credentials> - <attributes/> - <options/> - </identity-object-type> - </supported-identity-object-types> - <options> - <option> - <name>hibernateSessionFactoryRegistryName</name> - <value>hibernateSessionFactory</value> - </option> - <option> - <name>allowNotDefinedIdentityObjectTypes</name> - <value>true</value> - </option> - <option> - <name>populateRelationshipTypes</name> - <value>true</value> - </option> - <option> - <name>populateIdentityObjectTypes</name> - <value>true</value> - </option> - <option> - <name>allowNotDefinedAttributes</name> - <value>true</value> - </option> - <option> - <name>isRealmAware</name> - <value>true</value> - </option> - </options> - </identity-store> - </identity-stores> - </stores> + xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_ga identity-config.xsd"> + <realms> + <realm> + <id>realm</id> + <repository-id-ref>PortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + <realm> + <id>realm_portal</id> + <repository-id-ref>PortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + <realm> + <id>realm_sample-portal</id> + <repository-id-ref>PortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + </realms> + <repositories> + <repository> + <id>PortalRepository</id> + <class>org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + </repository> + </repositories> + <stores> + <attribute-stores/> + <identity-stores> + <identity-store> + <id>HibernateStore</id> + <class>org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl</class> + <external-config/> + <supported-relationship-types> + <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> + <relationship-type>JBOSS_IDENTITY_ROLE</relationship-type> + </supported-relationship-types> + <supported-identity-object-types> + <identity-object-type> + <name>USER</name> + <relationships/> + <credentials> + <credential-type>PASSWORD</credential-type> + </credentials> + <attributes/> + <options/> + </identity-object-type> + <identity-object-type> + <name>GTN_GROUP_TYPE</name> + <relationships> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>GTN_GROUP_TYPE</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_ROLE</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + </relationships> + <credentials/> + <attributes/> + <options/> + </identity-object-type> + </supported-identity-object-types> + <options> + <option> + <name>hibernateSessionFactoryRegistryName</name> + <value>hibernateSessionFactory</value> + </option> + <option> + <name>populateRelationshipTypes</name> + <value>true</value> + </option> + <option> + <name>populateIdentityObjectTypes</name> + <value>true</value> + </option> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + <option> + <name>isRealmAware</name> + <value>true</value> + </option> + </options> + </identity-store> + </identity-stores> + </stores> </jboss-identity> \ No newline at end of file Added: portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-ldap-config.xml =================================================================== --- portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-ldap-config.xml (rev 0) +++ portal/trunk/web/portal/src/main/webapp/WEB-INF/conf/organization/picketlink-idm/picketlink-idm-ldap-config.xml 2010-01-05 19:28:49 UTC (rev 1166) @@ -0,0 +1,388 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- + + Copyright (C) 2009 eXo Platform SAS. + + This is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as + published by the Free Software Foundation; either version 2.1 of + the License, or (at your option) any later version. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this software; if not, write to the Free + Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + 02110-1301 USA, or see the FSF site: http://www.fsf.org. + +--> + +<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_ga" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_ga identity-config.xsd"> + <realms> + <realm> + <id>realm</id> + <repository-id-ref>PortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + <realm> + <id>realm_portal</id> + <repository-id-ref>PortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + <realm> + <id>realm_sample-portal</id> + <repository-id-ref>SamplePortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + </realm> + </realms> + <repositories> + <repository> + <id>PortalRepository</id> + <class>org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + <identity-store-mappings> + <identity-store-mapping> + <identity-store-id>PortalLDAPStore</identity-store-id> + <identity-object-types> + <identity-object-type>USER</identity-object-type> + <identity-object-type>GTN_GROUP_TYPE</identity-object-type> + </identity-object-types> + <options/> + </identity-store-mapping> + </identity-store-mappings> + <options> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + </options> + </repository> + <repository> + <id>SamplePortalRepository</id> + <class>org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + <identity-store-mappings> + <identity-store-mapping> + <identity-store-id>SamplePortalLDAPStore</identity-store-id> + <identity-object-types> + <identity-object-type>USER</identity-object-type> + <identity-object-type>GTN_GROUP_TYPE</identity-object-type> + </identity-object-types> + <options/> + </identity-store-mapping> + </identity-store-mappings> + <options> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + </options> + </repository> + </repositories> + <stores> + <attribute-stores/> + <identity-stores> + <identity-store> + <id>HibernateStore</id> + <class>org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl</class> + <external-config/> + <supported-relationship-types> + <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> + <relationship-type>JBOSS_IDENTITY_ROLE</relationship-type> + </supported-relationship-types> + <supported-identity-object-types> + <identity-object-type> + <name>USER</name> + <relationships/> + <credentials> + <credential-type>PASSWORD</credential-type> + </credentials> + <attributes/> + <options/> + </identity-object-type> + <identity-object-type> + <name>GTN_GROUP_TYPE</name> + <relationships> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>GTN_GROUP_TYPE</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_ROLE</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + </relationships> + <credentials/> + <attributes/> + <options/> + </identity-object-type> + </supported-identity-object-types> + <options> + <option> + <name>hibernateSessionFactoryRegistryName</name> + <value>hibernateSessionFactory</value> + </option> + <option> + <name>populateRelationshipTypes</name> + <value>true</value> + </option> + <option> + <name>populateIdentityObjectTypes</name> + <value>true</value> + </option> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + <option> + <name>isRealmAware</name> + <value>true</value> + </option> + </options> + </identity-store> + <identity-store> + <id>PortalLDAPStore</id> + <class>org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl</class> + <external-config/> + <supported-relationship-types> + <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> + </supported-relationship-types> + <supported-identity-object-types> + <identity-object-type> + <name>USER</name> + <relationships/> + <credentials> + <credential-type>PASSWORD</credential-type> + </credentials> + <attributes> + </attributes> + <options> + <option> + <name>idAttributeName</name> + <value>uid</value> + </option> + <option> + <name>passwordAttributeName</name> + <value>userPassword</value> + </option> + <option> + <name>ctxDNs</name> + <value>ou=People,o=portal,o=gatein,dc=example,dc=com</value> + </option> + <option> + <name>allowCreateEntry</name> + <value>true</value> + </option> + <option> + <name>createEntryAttributeValues</name> + <value>objectClass=top</value> + <value>objectClass=inetOrgPerson</value> + <value>sn= </value> + <value>cn= </value> + </option> + </options> + </identity-object-type> + <identity-object-type> + <name>GTN_GROUP_TYPE</name> + <relationships> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>GTN_GROUP_TYPE</identity-object-type-ref> + </relationship> + </relationships> + <credentials/> + <attributes/> + <options> + <option> + <name>idAttributeName</name> + <value>cn</value> + </option> + <option> + <name>ctxDNs</name> + <value>ou=Groups,o=portal,o=gatein,dc=example,dc=com</value> + </option> + <!--<option>--> + <!--<name>entrySearchFilter</name>--> + <!--<value></value>--> + <!--</option>--> + <option> + <name>allowCreateEntry</name> + <value>true</value> + </option> + <option> + <name>parentMembershipAttributeName</name> + <value>member</value> + </option> + <option> + <name>isParentMembershipAttributeDN</name> + <value>true</value> + </option> + <option> + <name>allowEmptyMemberships</name> + <value>true</value> + </option> + <option> + <name>createEntryAttributeValues</name> + <value>objectClass=top</value> + <value>objectClass=groupOfNames</value> + </option> + </options> + </identity-object-type> + </supported-identity-object-types> + <options> + <option> + <name>providerURL</name> + <value>ldap://localhost:1389</value> + </option> + <option> + <name>adminDN</name> + <value>cn=Directory Manager</value> + </option> + <option> + <name>adminPassword</name> + <value>password</value> + </option> + <option> + <name>searchTimeLimit</name> + <value>10000</value> + </option> + </options> + </identity-store> + <identity-store> + <id>SamplePortalLDAPStore</id> + <class>org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl</class> + <external-config/> + <supported-relationship-types> + <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> + </supported-relationship-types> + <supported-identity-object-types> + <identity-object-type> + <name>USER</name> + <relationships/> + <credentials> + <credential-type>PASSWORD</credential-type> + </credentials> + <attributes> + </attributes> + <options> + <option> + <name>idAttributeName</name> + <value>uid</value> + </option> + <option> + <name>passwordAttributeName</name> + <value>userPassword</value> + </option> + <option> + <name>ctxDNs</name> + <value>ou=People,o=sample-portal,o=gatein,dc=example,dc=com</value> + </option> + <option> + <name>allowCreateEntry</name> + <value>true</value> + </option> + <option> + <name>createEntryAttributeValues</name> + <value>objectClass=top</value> + <value>objectClass=inetOrgPerson</value> + <value>sn= </value> + <value>cn= </value> + </option> + </options> + </identity-object-type> + <identity-object-type> + <name>GTN_GROUP_TYPE</name> + <relationships> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>USER</identity-object-type-ref> + </relationship> + <relationship> + <relationship-type-ref>JBOSS_IDENTITY_MEMBERSHIP</relationship-type-ref> + <identity-object-type-ref>GTN_GROUP_TYPE</identity-object-type-ref> + </relationship> + </relationships> + <credentials/> + <attributes/> + <options> + <option> + <name>idAttributeName</name> + <value>cn</value> + </option> + <option> + <name>ctxDNs</name> + <value>ou=Groups,o=sample-portal,o=gatein,dc=example,dc=com</value> + </option> + <!--<option>--> + <!--<name>entrySearchFilter</name>--> + <!--<value></value>--> + <!--</option>--> + <option> + <name>allowCreateEntry</name> + <value>true</value> + </option> + <option> + <name>parentMembershipAttributeName</name> + <value>member</value> + </option> + <option> + <name>isParentMembershipAttributeDN</name> + <value>true</value> + </option> + <option> + <name>allowEmptyMemberships</name> + <value>true</value> + </option> + <option> + <name>createEntryAttributeValues</name> + <value>objectClass=top</value> + <value>objectClass=groupOfNames</value> + </option> + </options> + </identity-object-type> + </supported-identity-object-types> + <options> + <option> + <name>providerURL</name> + <value>ldap://localhost:1389</value> + </option> + <option> + <name>adminDN</name> + <value>cn=Directory Manager</value> + </option> + <option> + <name>adminPassword</name> + <value>password</value> + </option> + <option> + <name>searchTimeLimit</name> + <value>10000</value> + </option> + </options> + </identity-store> + </identity-stores> + </stores> +</jboss-identity> \ No newline at end of file