Return-Path: 
 <users-return-157506-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 76861 invoked from network); 29 Jan 2007 04:13:25 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 29 Jan 2007 04:13:25 -0000
Received: (qmail 42826 invoked by uid 500); 29 Jan 2007 04:13:18 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 42800 invoked by uid 500); 29 Jan 2007 04:13:18 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 42789 invoked by uid 99); 29 Jan 2007 04:13:18 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 28 Jan 2007 20:13:18 -0800
X-ASF-Spam-Status: No, hits=0.3 required=10.0
	tests=MAILTO_TO_SPAM_ADDR,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: domain of codeshepherd@gmail.com
 designates 64.233.162.227 as permitted sender)
Received: from [64.233.162.227] (HELO nz-out-0506.google.com) (64.233.162.227)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 28 Jan 2007 20:13:07 -0800
Received: by nz-out-0506.google.com with SMTP id x7so1422209nzc
        for <users@tomcat.apache.org>; Sun, 28 Jan 2007 20:12:46 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:subject:from:reply-to:to:content-type:date:message-id:mime-version:x-mailer:content-transfer-encoding;
        b=ECbE/ygGPsIf5ivz/QigD0Z0u9RJU3V7clpriBhFIJ7HWXsvC69XF/tgOljL2M+oubGGT/clwgxJSIc1cb81DRYnB7hKhM430VEZE9J4uhMo4W5QdpBkRIJLo0V7Ac+5u4MdNuAY2ysiCvuqaQEOSIqV2st7xGARzKr0bEZ+sxs=
Received: by 10.35.97.17 with SMTP id z17mr11997382pyl.1170043966638;
        Sun, 28 Jan 2007 20:12:46 -0800 (PST)
Received: from ?192.168.1.101? ( [203.118.52.13])
        by mx.google.com with ESMTP id f6sm5837390pyh.2007.01.28.20.12.44;
        Sun, 28 Jan 2007 20:12:46 -0800 (PST)
Subject: Configuring Tomcat to Authenticating with Active Directory
From: Deepan <codeshepherd@gmail.com>
Reply-To: codeshepherd@gmail.com
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain
Date: Mon, 29 Jan 2007 12:11:14 +0800
Message-Id: <1170043874.2339.13.camel@codeworld>
Mime-Version: 1.0
X-Mailer: Evolution 2.8.1.1 (2.8.1.1-3.fc6) 
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

Hi All,
 I  am trying to configure one of my application deployed on tomcat to
authenticate with Active Directory. I had configured web.xml and
server.xml as below and I am using Basic mode of Authentication. 

Observation:
When i enter the wrong user name and password, tomcat prompts me to
enter username password again. But when I enter the correct Username and
password, tomcat directs me to access denied page. 

The following ldapsearch command works fine. 

 ldapsearch -x -k -h 172.168.1.1  -W -D
"cn=user00,cn=Users,dc=gs,dc=novaglobal,dc=com,dc=sg" 




        web.xml 
        -------------------------------------------------------------------------------------------------
         
           <servlet>
                <servlet-name>jsp</servlet-name>
        
        <servlet-class>org.apache.jasper.servlet.JspServlet</servlet-class>
                <init-param>
                    <param-name>fork</param-name>
                    <param-value>false</param-value>
                </init-param>
                <init-param>
                    <param-name>xpoweredBy</param-name>
                    <param-value>false</param-value>
                </init-param>
                <load-on-startup>3</load-on-startup>
            </servlet>
         
         
         
        <security-constraint>
                <web-resource-collection>
        
        <web-resource-name>YourWebApp</web-resource-name>
                        <description> accessible by authenticated users
        of the tomcat role</description>
                        <url-pattern>/gridsphere/*</url-pattern>
                        <http-method>GET</http-method>
                        <http-method>POST</http-method>
                        <http-method>PUT</http-method>
                        <http-method>DELETE</http-method>
                </web-resource-collection>
                <auth-constraint>
                        <description>These roles are allowed
        access</description>
                        <role-name>member</role-name>
                </auth-constraint>
        </security-constraint>
         
        <login-config>
                <auth-method>BASIC</auth-method>
                <realm-name>GridSphere</realm-name>
        </login-config>
         
        <security-role>
                <description>Only 'tomcat' role is allowed to access
        this web application</description>
                <role-name>member</role-name>
        </security-role>
                                      
         
        ------------------------------------------------------------------------------------------------------------------
         
         
        server.xml 
         
         
         
         
        <Realm className="org.apache.catalina.realm.JNDIRealm"
        debug="99"
         
        connectionURL="ldap://172.168.1.1:389"
        connectionName="user00@gs.novaglobal.com.sg"
        connectionPassword="xxxxx"
        referrals="follow"
        userBase="CN=Users,DC=gs,DC=novaglobal,DC=com,DC=sg"
        userSearch="(sAMAccountName={0})"
        userSubtree="true"
        roleBase="CN=Users,DC=gs,DC=novaglobal,DC=com,DC=sg"
        roleName="member"
        roleSubtree="true"
        roleSearch="(member={0})"
        /> 


-- 
-----------------------------------------------
Regards
Deepan Chakravarthy N
http://www.codeshepherd.com/
http://sudoku-solver.net/

I am a programmer by day,
I dig grave for other programmers by night.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org