Hi, Please see my answers inline.
On Wed, Jan 20, 2010 at 2:55 PM, Amila Suriarachchi <[email protected]> wrote: > hi, > > here are some of the problems I saw when using the ldap user manager. > 1. [2010-01-20 14:35:59,981] ERROR - ******* Remove me name is space is > *******uid=admin,ou=system > what could be the reason for this? > > Removed thanks for this. > 2. this is in the user-mgt.xml file. > > <Configuration> > <AdminRole>admin</AdminRole> > <AdminUser> > <UserName>admin</UserName> > <Password>admin</Password> > </AdminUser> > <EveryOneRoleName>everyone</EveryOneRoleName> > <!-- By default users in thsi role sees the registry root --> > <ReadOnly>false</ReadOnly> > <MaxUserNameListLength>500</MaxUserNameListLength> > <Property > name="url">jdbc:h2:repository/database/WSO2CARBON_DB</Property> > <Property name="userName">wso2carbon</Property> > <Property name="password">wso2carbon</Property> > <Property name="driverName">org.h2.Driver</Property> > <Property name="maxActive">50</Property> > <Property name="maxWait">60000</Property> > <Property name="minIdle">5</Property> > </Configuration> > > As I see this configuration applies to all store managers. i.e. still I > have to use a database url although I use ldap server. is this correct? > > Database is required to store the user permissions. So we need the database URL. > And also with ldap the admin password is replaced with the admin password > given in the storeManager. > It is not only the admin. There two usernames here. One username/password is used to create a connection to the LDAP server. The other username/password is used as the admin of our products. These two can be same or different. > > 3. New users can not be added when using ldap UserStoreManager > > is there a reason for this? or is it not implemented? > > This is the way it is implemented. We don't want to write to existing LDAP servers. We give the guarantee our users that that we do not alter their data. Thank you, DimuthuL > thanks, > Amila. > > > > > > > On Wed, Jan 20, 2010 at 2:31 PM, Amila Suriarachchi <[email protected]>wrote: > >> hi, >> >> Apache Directory Service Component can be used to start an ldap server >> internally for carbon framework. >> >> Currently this component has developed as a normal carbon component under >> the carbon-component. I have tested this component by >> starting it within my IDE and editing the user-mgt.xml to point to that. >> >> i.e with the following configuration. >> >> <UserStoreManager >> class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager"> >> <Property >> name="ConnectionURL">ldap://localhost:10389</Property> >> <Property name="ConnectionName">uid=admin,ou=system</Property> >> <Property name="ConnectionPassword">secret</Property> >> <Property name="UserSearchBase">ou=system</Property> >> <Property >> name="UserNameSearchFilter">(&(objectClass=person)(uid=?))</Property> >> <Property name="UserNameAttribute">mail</Property> >> </UserStoreManager> >> >> It works fine and I can login to the carbon console using the user name >> admin and pass secret. >> >> But there is a problem with integrating this with the carbon framework. As >> you can see since user manager points to this >> bundle this has to start first and hence it should go under the carbon >> folder ( I mean need to move this component to carbon project). >> Then user manager has to wait until this component starts up. >> >> Can we move this to carbon and do the above change to user manager? >> >> What are the other requirements of this component? So far it can use as >> the internal ldap userStoreManager but have to configure the ssl etc.. >> >> thanks, >> Amila. >> >> >> > > _______________________________________________ > Carbon-dev mailing list > [email protected] > https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev > >
_______________________________________________ Carbon-dev mailing list [email protected] https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
