tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Randy Secrist" <tom...@secristfamily.com>
Subject JNDI Realm Help - (using iplanet)
Date Tue, 20 Aug 2002 17:46:00 GMT
Hello,

I am trying to get TC (4.0.4) to establish a working JNDI realm using
iplanet's directory server.  I am using FORM based login and have this
working as a JDBC realm previously.

As you can see below, I would like to keep my users and roles in
ou=warnertruck,ou=truckcenter,dc=secristfamily,dc=com.  Iplanet sets up each
user with a role nsrole, and nsroledn.  I have tried switching the values
for roleName, and roleSearch, and since iplanet stores passwords using SHA,
I even threw on a digest="SHA" in the realm tag.  I have messed with this
for months now, and have searched the web extensivly for help.  Would
someone please tell me what I need to do to get this working?

If I can actually get this working, I will be most elated!

Randy Secrist

Below are my catalina.log, and server.xml...

2002-08-20 11:32:04 JNDIRealm[WarnerTruck]: Connecting to URL
ldap://myserver.com/
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]: getUserDN(RSecrist)
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]:
dn=uid=RSecrist,ou=warnertruck,ou=truckcenter,dc=secristfamily,dc=com
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]:   retrieving attribute
userPassword
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]:   retrieving value
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]:   validating credentials
2002-08-20 11:32:26 JNDIRealm[WarnerTruck]: Username RSecrist NOT
successfully authenticated

----------------------------------------------------------------------------
-----------------------------------------------------

Here is my server.xml snippet:
<Realm   className="org.apache.catalina.realm.JNDIRealm" debug="99"
connectionName="cn=DirectoryManager" connectionPassword="pleaseWork"
connectionURL="ldap://myserver.com/"
roleBase="ou=warnertruck,ou=truckcenter,dc=secristfamily,dc=com"
roleName="nsroledn"
roleSearch="(cn={0},ou=warnertruck,ou=truckcenter,dc=secristfamily,dc=com)"
roleSubtree="false" userPassword="userPassword"
userPattern="uid={0},ou=warnertruck,ou=truckcenter,dc=secristfamily,dc=com"
/>

----------------------------------------------------------------------------
-----------------------------------------------------


--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>


Mime
View raw message