We did not ship this in Iridium. Can we start looking into this again now
that the release is out?

Samisa...

On Thu, Jan 21, 2010 at 8:55 AM, Dimuthu Leelarathne <[email protected]>wrote:

> Hi,
>
> Please see my answers inline.
>
> On Wed, Jan 20, 2010 at 2:55 PM, Amila Suriarachchi <[email protected]>wrote:
>
>> hi,
>>
>> here are some of the problems I saw when using the ldap user manager.
>> 1. [2010-01-20 14:35:59,981] ERROR -  ******* Remove me name is space is
>> *******uid=admin,ou=system
>> what could be the reason for this?
>>
>>
> Removed thanks for this.
>
>
>> 2. this is in the user-mgt.xml file.
>>
>> <Configuration>
>>     <AdminRole>admin</AdminRole>
>>     <AdminUser>
>>         <UserName>admin</UserName>
>>         <Password>admin</Password>
>>     </AdminUser>
>>     <EveryOneRoleName>everyone</EveryOneRoleName>
>>     <!-- By default users in thsi role sees the registry root -->
>>     <ReadOnly>false</ReadOnly>
>>     <MaxUserNameListLength>500</MaxUserNameListLength>
>>     <Property
>> name="url">jdbc:h2:repository/database/WSO2CARBON_DB</Property>
>>     <Property name="userName">wso2carbon</Property>
>>     <Property name="password">wso2carbon</Property>
>>     <Property name="driverName">org.h2.Driver</Property>
>>     <Property name="maxActive">50</Property>
>>     <Property name="maxWait">60000</Property>
>>     <Property name="minIdle">5</Property>
>> </Configuration>
>>
>> As I see this configuration applies to all store managers. i.e. still I
>> have to use a database url although I use ldap server. is this correct?
>>
>> Database is required to store the user permissions. So we need the
> database URL.
>
>
>> And also with ldap the admin password is replaced with the admin password
>> given in the storeManager.
>>
>
> It is not only the admin. There two usernames here. One username/password
> is used to create a connection to the LDAP server. The other
> username/password is used as the admin of our products. These two can be
> same or different.
>
>
>>
>> 3. New users can not be added when using ldap UserStoreManager
>>
>> is there a reason for this? or is it not implemented?
>>
>>
>
> This is the way it is implemented. We don't want to write to existing LDAP
> servers. We give the guarantee our users that that we do not alter their
> data.
>
> Thank you,
> DimuthuL
>
>
>
>> thanks,
>>
>> Amila.
>>
>>
>>
>>
>>
>>
>> On Wed, Jan 20, 2010 at 2:31 PM, Amila Suriarachchi <[email protected]>wrote:
>>
>>> hi,
>>>
>>> Apache Directory Service Component can be used to start an ldap server
>>> internally for carbon framework.
>>>
>>> Currently this component has developed as a normal carbon component under
>>> the carbon-component. I have tested this component by
>>> starting it within my IDE and editing the user-mgt.xml to point to that.
>>>
>>> i.e with the following configuration.
>>>
>>> <UserStoreManager
>>>             class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager">
>>>             <Property
>>> name="ConnectionURL">ldap://localhost:10389</Property>
>>>             <Property
>>> name="ConnectionName">uid=admin,ou=system</Property>
>>>             <Property name="ConnectionPassword">secret</Property>
>>>             <Property name="UserSearchBase">ou=system</Property>
>>>              <Property
>>> name="UserNameSearchFilter">(&amp;(objectClass=person)(uid=?))</Property>
>>>             <Property name="UserNameAttribute">mail</Property>
>>>         </UserStoreManager>
>>>
>>> It works fine and I can login to the carbon console using the user name
>>> admin and pass secret.
>>>
>>> But there is a problem with integrating this with the carbon framework.
>>> As you can see since user manager points to this
>>> bundle this has to start first and hence it should go under the carbon
>>> folder ( I mean need to move this component to carbon project).
>>> Then user manager has to wait until this component starts up.
>>>
>>> Can we move this to carbon and do the above change to user manager?
>>>
>>> What are the other requirements of this component? So far it can use as
>>> the internal ldap userStoreManager but have to configure the ssl etc..
>>>
>>> thanks,
>>> Amila.
>>>
>>>
>>>
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
> _______________________________________________
> Carbon-dev mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>
> --
Samisa Abeysinghe
Director, Engineering - WSO2 Inc.

http://wso2.com/ - "lean . enterprise . middleware"
_______________________________________________
Carbon-dev mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to