[
https://jira.jboss.org/browse/GTNPORTAL-1347?page=com.atlassian.jira.plug...
]
Boleslaw Dawidowicz commented on GTNPORTAL-1347:
------------------------------------------------
I added LoginModule implementation from Marek Posolda and Viliam Rockai into trunk.
"org.exoplatform.services.organization.idm.CustomMembershipLoginModule" will
assign users to a given group during login. It can be uncommented in JBossAS deployment in
gatein.ear/META-INF/gatein-jboss-beans.xml:
<login-module code="org.exoplatform.web.security.PortalLoginModule"
flag="required">
<module-option
name="portalContainerName">portal</module-option>
<module-option
name="realmName">gatein-domain</module-option>
</login-module>
<login-module
code="org.exoplatform.services.security.jaas.SharedStateLoginModule"
flag="required">
<module-option
name="portalContainerName">portal</module-option>
<module-option
name="realmName">gatein-domain</module-option>
</login-module>
<!-- Uncomment this part to check on each login if user is member of
"/platform/users" group and if not
create such membership -->
<!--
<login-module
code="org.exoplatform.services.organization.idm.CustomMembershipLoginModule"
flag="required">
<module-option
name="portalContainerName">portal</module-option>
<module-option
name="realmName">gatein-domain</module-option>
<module-option name="membershipType">member</module-option>
<module-option
name="groupId">/platform/users</module-option>
</login-module>
-->
<login-module
code="org.exoplatform.services.security.j2ee.JbossLoginModule"
flag="required">
<module-option
name="portalContainerName">portal</module-option>
<module-option
name="realmName">gatein-domain</module-option>
</login-module>
I want also to try add similar feature to the identity integration layer directly so given
membership would be returned for every user and not possible to be revoked.
For now I'm leaving this JIRA opened as documentation need to be updated.
Mechanism to auto assign users to /platform/users group
-------------------------------------------------------
Key: GTNPORTAL-1347
URL:
https://jira.jboss.org/browse/GTNPORTAL-1347
Project: GateIn Portal
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Affects Versions: 3.1.0-GA
Reporter: Boleslaw Dawidowicz
Assignee: Boleslaw Dawidowicz
Fix For: 3.2.0-GA
Use case is mostly LDAP config where core gatein groups like /platform/users are kept in
DB. Adding bigger number of users to LDAP which don't belong to /platform/users
introduces administration problem to allow those users to login.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira