[Security & JAAS/JBoss] - Re: Domino LDAP
by rsoika
hi,
we solved the configuration problems with the following configuration (inside the login-config.xml
<!-- LDAP login configuration for Domino -->
| <application-policy name="imixsIX">
| <authentication>
| <login-module code="org.jboss.security.auth.spi.LdapLoginModule"
| flag="required">
| <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
| <module-option name="java.naming.provider.url">ldap://myhostmuc:389/</module-option>
| <module-option name="java.naming.security.authentication">simple</module-option>
| <module-option name="principalDNPrefix">cn=</module-option>
| <!-- for principalDNSuffix no entry is needed for domino (e.g. o=MYDOMIAN) -->
| <module-option name="principalDNSuffix"></module-option>
| <module-option name="rolesCtxDN"></module-option>
| <module-option name="uidAttributeID">member</module-option>
| <module-option name="matchOnUserDN">true</module-option>
| <module-option name="roleAttributeID">cn</module-option>
| <module-option name="roleAttributeIsDN">false</module-option>
| <module-option name="searchTimeLimit">5000</module-option>
| <!-- searchScope ONELEVEL_SCOPE is neccesary for Domino -->
| <module-option name="searchScope">ONELEVEL_SCOPE</module-option>
|
| </login-module>
| </authentication>
| </application-policy>
|
If your user will see no roles this will be an isue of the names.nsf acl. If "normal" users are not allowed to read in the name.nsf (this is typical for Domino installations) you need additional params to make the lookups with an admin account:
<!-- Principal und Credentials for ldap lookups -->
| <module-option name="java.naming.security.principal">cn=admin,o=MYORG</module-option>
| <module-option name="java.naming.security.credentials">password</module-option>
I hope this will be helpfull
Ralph
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3971001#3971001
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3971001
19 years, 7 months
[JBoss jBPM] - Storage of process variables outside jbpm?
by the_dude
Hi,
Until now I have stored all process variables by using the mechanisms that are built in jBPM. I fetch my objects using hql statements that check some process variable values. No prob here.
This was fine until my customer expressed his wish that a separation between jbpm specific data and process variables needed to be done. To be more specific: 1) No process variables inside the jbpm tables plus 2) the process variables of one process definition must not be saved on the same database schema as variables of another process definition. This is quite comprehensible against the fact that 1) different departments want to have a look at their data, run analyses on, etc. and 2) don't want other departments to do this on their data.
Has anyone run into that kind of problem yet?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3971000#3971000
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3971000
19 years, 7 months