Hello,

Im devoping a project where i should be capable to integrate a ws2o Gadget
Server with Google Apps  and a external User Store based on LDAP...

I need the integration piece, and wso2 Identity Server seems a good choice.

If planned to do this steps:

1 - Google Apps through Identity Server

In order to provide Single Sign On, Identity Server seems to be easily
configurated as User Store throught SAML 2.0 as exposed on:
http://blog.thilinamb.com/2010/04/saml-20-based-single-sign-on-with-wso2.html

2 - Gadget Server through Identity Server
I think it's possible, but can't find any documentation about integration.

Identity Server can act lik a LDAP isn it, how to configure it then?

Then i would provide Gadget server with external LDAP user store pointing to
Identity Server

3 - Identity Server with LDAP external user store.

Identity Server can be configured against a LDAP server by User Management
Configuration, but i can't find this option on the menu!!!
I already found a configuration xml for User Management

[[Documentacion Configuración |
http://wso2.org/project/solutions/identity/3.0.0/docs/user-core/admin_guide.html]]
  <!-- UserStoreManager
            class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager">
            <Property name="ConnectionURL">ldap://localhost:10389</Property>
            <Property name="ConnectionName">uid=admin,ou=system</Property>
            <Property name="ConnectionPassword">admin123</Property>
            <Property name="UserSearchBase">ou=system</Property>
            <Property name="UserNameListFilter">(objectClass=person)</Property>
            <Property name="UserNameAttribute">uid</Property>
            <Property name="ReadLDAPGroups">false</Property>
            <Property name="GroupSearchBase">ou=system</Property>
            <Property
name="GroupSearchFilter">(objectClass=groupOfNames)</Property>
            <Property name="GroupNameAttribute">cn</Property>
            <Property name="MembershipAttribute">member</Property>
        </UserStoreManager -->
        <!-- Active directory configuration follows -->
        <!-- UserStoreManager
            class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager">
            <Property name="ConnectionURL">ldap://10.100.1.211:389</Property>
            <Property
name="ConnectionName">cn=Administrator,cn=users,dc=wso2,dc=lk</Property>
            <Property name="ConnectionPassword">admin123</Property>
            <Property name="UserSearchBase">cn=users,dc=wso2,dc=lk</Property>
            <Property name="UserNameListFilter">(objectClass=person)</Property>
            <Property name="UserNameAttribute">sAMAccountName</Property>
            <Property name="ReadLDAPGroups">true</Property>
            <Property name="GroupSearchBase">cn=users,dc=wso2,dc=lk</Property>
            <Property name="GroupSearchFilter">(objectcategory=group)</Property>
            <Property name="GroupNameAttribute">cn</Property>
            <Property name="MemberOfAttribute">memberOf</Property>
        </UserStoreManager -->

Then it should be "easy" to configure a ldap server on this params.



Did anyone of you make something similar ?

I'm on the right way for the solution?

Can anyone help me on Step 2?


Lot of thanks to all!



-- 
Víctor Álvarez
Incoming IT www.incomingIT.com
www.twitter.com/incomingIT
Escribiendo en y sobre Accesibilidad Web: http://accesibilidad.blogspot.com





-- 
Víctor Álvarez
Incoming IT www.incomingIT.com
www.twitter.com/incomingIT
Escribiendo en y sobre Accesibilidad Web: http://accesibilidad.blogspot.com





-- 
Víctor Álvarez
Incoming IT www.incomingIT.com
www.twitter.com/incomingIT
Escribiendo en y sobre Accesibilidad Web: http://accesibilidad.blogspot.com
_______________________________________________
Carbon-dev mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to