[jboss-user] [Security & JAAS/JBoss] - Re: JAAS/LDAP Roles configuration pulls superset instead of

[manogaranyuvaraj]

Hi 

I need some idea to configure the LDAP. I have the users & the roles in LDAP server. I can able to validate the role, but i can authenticate with the username & password. I think i have made some wrong thing. 

Here my Configuration.

<application-policy name="jmx-console">
        
           <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required">
                <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
                <module-option name="java.naming.provider.url">ldap://ldaphost.abc.com:7992/</module-option>
                <module-option name="java.naming.security.authentication">simple</module-option>
                <module-option name="principalDNPrefix">uid=</module-option>
                <module-option name="uidAttributeID">uniquemember</module-option>
                <module-option name="matchOnUserDN">true</module-option>
                <module-option name="roleAttributeID">cn</module-option>
                <module-option name="roleAttributeIsID">false</module-option>
                <module-option name="principalDNSuffix">,ou=People,dc=abc,dc=com</module-option>
                <module-option name="rolesCtxDN">ou=Roles,du=abc,dc=com</module-option>
           </login-module>
        
     </application-policy>

Roles & users structure in LDAP

# entry-id: 64
dn: cn=JBossAdmin,ou=Roles,dc=abc,dc=com
objectClass: top
objectClass: groupofuniquenames
creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot
createTimestamp: 20061024132211Z
nsUniqueId: 8e207c01-1dd211b2-80c8e8b0-30c2eb27
uniqueMember: uid=emendez,ou=People,dc=gmacinsurance,dc=com
uniqueMember: uid=jsadler,ou=People,dc=gmacinsurance,dc=com
uniqueMember: uid=pabeln,ou=People,dc=gmacinsurance,dc=com
uniqueMember: uid=ymano,ou=People,dc=gmacinsurance,dc=com
cn: JBossAdmin

# entry-id: 65
dn: cn=HttpInvoker,ou=Roles,dc=abc,dc=com
objectClass: top
objectClass: groupofuniquenames
cn: HttpInvoker
creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot
createTimestamp: 20061024141154Z
nsUniqueId: 8a442801-1dd211b2-80cfe8b0-30c2eb27
uniqueMember: uid=emendez,ou=People,dc=abc,dc=com
uniqueMember: uid=jsadler,ou=People,dc=abc,dc=com
uniqueMember: uid=pabeln,ou=People,dc=abc,dc=com
uniqueMember: uid=ymano,ou=People,dc=abc,dc=com

Any Idea..... 

Thanks

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3980394#3980394

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3980394