[
https://issues.apache.org/jira/browse/KARAF-3052?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Iulius Hutuleac updated KARAF-3052:
-----------------------------------
Description:
When we setup the user/group base location all queries are failing if we are at
base of the DC.
As a workaround we could set follow referrals property to "follow" but this is
not supported at the moment using the standard config file.
Using the modified source as described in the attached file and a config file
entry this would become feasible.
org.apache.activemq.jaas.LDAPLoginModule optional
debug=true
initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory
connectionURL="ldap://test.local:389";
connectionUsername="CN=testusr,DC=test,DC=local"
connectionPassword="XXXXXXXXXX"
connectionProtocol="s"
authentication=simple
userBase="DC=test,DC=local"
userSearchSubtree=true
userRoleName=sAMAccountName
userSearchMatching="(sAMAccountName={0})"
roleBase="DC=test,DC=local"
roleName=cn
roleSearchMatching="(member:=uid={1})"
java.naming.referral=follow
roleSearchSubtree=true;
};
was:
When we setup the user/group base location all queries are failing if we are at
base of the DC.
As a workaround we could set follow referrals property to "follow" but this is
not supported at the moment using the standard config file.
> Karaf LDAP integration does not support REFERRAL setup
> ------------------------------------------------------
>
> Key: KARAF-3052
> URL: https://issues.apache.org/jira/browse/KARAF-3052
> Project: Karaf
> Issue Type: Bug
> Components: karaf-security
> Reporter: Iulius Hutuleac
> Attachments: LDAPLoginModule.java.patch
>
>
> When we setup the user/group base location all queries are failing if we are
> at base of the DC.
> As a workaround we could set follow referrals property to "follow" but this
> is not supported at the moment using the standard config file.
> Using the modified source as described in the attached file and a config file
> entry this would become feasible.
> org.apache.activemq.jaas.LDAPLoginModule optional
> debug=true
> initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory
> connectionURL="ldap://test.local:389";
> connectionUsername="CN=testusr,DC=test,DC=local"
> connectionPassword="XXXXXXXXXX"
> connectionProtocol="s"
> authentication=simple
> userBase="DC=test,DC=local"
> userSearchSubtree=true
> userRoleName=sAMAccountName
> userSearchMatching="(sAMAccountName={0})"
> roleBase="DC=test,DC=local"
> roleName=cn
> roleSearchMatching="(member:=uid={1})"
> java.naming.referral=follow
> roleSearchSubtree=true;
> };
--
This message was sent by Atlassian JIRA
(v6.2#6252)
