Return-Path: 
 <dev-return-77037-apmail-geronimo-dev-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-dev-archive@www.apache.org
Received: (qmail 83407 invoked from network); 23 Sep 2009 23:40:38 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 23 Sep 2009 23:40:38 -0000
Received: (qmail 35354 invoked by uid 500); 23 Sep 2009 23:40:38 -0000
Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org
Received: (qmail 35259 invoked by uid 500); 23 Sep 2009 23:40:38 -0000
Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:dev-help@geronimo.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@geronimo.apache.org>
List-Post: <mailto:dev@geronimo.apache.org>
Reply-To: dev@geronimo.apache.org
List-Id: <dev.geronimo.apache.org>
Delivered-To: mailing list dev@geronimo.apache.org
Received: (qmail 35250 invoked by uid 99); 23 Sep 2009 23:40:38 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Sep 2009 23:40:37 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Sep 2009 23:40:36 +0000
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id 24410234C4A7
	for <dev@geronimo.apache.org>; Wed, 23 Sep 2009 16:40:16 -0700 (PDT)
Message-ID: <1010035169.1253749216147.JavaMail.jira@brutus>
Date: Wed, 23 Sep 2009 16:40:16 -0700 (PDT)
From: "David Jencks (JIRA)" <jira@apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Updated: (GERONIMO-4513) LDAP Realm Improvements
In-Reply-To: <2091508321.1231929900227.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


     [ https://issues.apache.org/jira/browse/GERONIMO-4513?page=3Dcom.atlas=
sian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Jencks updated GERONIMO-4513:
-----------------------------------

    Fix Version/s:     (was: 2.2)
                   Wish List

great feature, need a patch or some time.

> LDAP Realm Improvements
> -----------------------
>
>                 Key: GERONIMO-4513
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4513
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)=20
>          Components: security
>    Affects Versions: 2.1.3
>            Reporter: J=C3=BCrgen Weber
>            Priority: Blocker
>             Fix For: Wish List
>
>
> I suggest several important improvements to the LDAP Realm, generally LDA=
P Realm should support the features of Tomcat's JNDIRealm (http://tomcat.ap=
ache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm)
> 1. a plan should be deployable from the console
> 2. LDAP Realm should allow anonymous bind (this is cause for "blocker")
> 3. I guess "User Role Search String" means a user attribute the role name=
s are taken from (same as Tomcat's userRoleName property). If this is set, =
all other role-related attributes should not be necessary. Generally, it sh=
ould not be necessary to have role-related attributes at all, if you only w=
ant the users to log in, but have <role-name>*</role-name>
> 4. if "Role User Search String" is empty, there is the wrong error messag=
e "option-roleSearchMatching must not be empty"
> There is no Role SearchMatching on the dialog
> 5. On the Test Results page: if the test fails, there is only
> =09Login Failed: LDAP Error
>     There should also be the error message and even stacktrace (right now=
 it's in the server log)

--=20
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.