Write your own login module, its not difficult. xxxxxxxxxxxxxxxxxxxxxxxx Scott Stark Chief Technology Officer JBoss Group, LLC xxxxxxxxxxxxxxxxxxxxxxxx
----- Original Message ----- From: "J. Diogo O. Ramos" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, March 14, 2003 3:27 AM Subject: [JBoss-dev] LdapLoginModule with Active Directory > We're using the LdapLoginModule to authenticate and do authorization > against and Active Directory container. > > But we're having two problems... > > --------------------------------- > The first and more important one is: > > Our users are separated in different "directories" according to the > functional area were they work on the organization. For instance: > \IT > \Commercial > \Users (generic ones) > \Financial > > But while using the LdapLoginModule we can only search against one > directory. We believe that one of two things can happen... Either search > recursively against all the directories or be able to specify a set of > directories (in the configuration) were the search is done. > > --------------------------------- > The second one is: > Each user has a set of roles... Typically the user's roles will increase > a lot since for each report (I'm referring to a website that produces > financial information reports) that the user can access he will have a > set of roles... > Typically we have three major groups of roles that most users will have > and than we have the exceptions... Those users that need to specifically > set roles. > > Suppose this is what we have: > User1 - role1 > - role2 > > User2 - role7 > - role8 > > What we'd like is to create 3 or 4 groups of roles and associate those > groups to the users. > > User1 - RoleGrp1 - role1 > - role2 > > User2 - RoleGrp2 - role7 > - role8 > > Once again, the problem is that while using the LdapLoginModule we can > only search against the first level of roles (if we have a group it > won't search inside of it). One choice would be to search recursively. > But if that is very complicated, being able to search two levels would > solve our problem. > > ------------------------------- > > Can you help us with both of these problems? > > Thanks in advance. > > > J. Diogo O. Ramos > mailto:[EMAIL PROTECTED] > _______________________________________ > Critical Software, SA > http://www.criticalsoftware.com > > > > > ------------------------------------------------------- > This SF.net email is sponsored by:Crypto Challenge is now open! > Get cracking and register here for some mind boggling fun and > the chance of winning an Apple iPod: > http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en > _______________________________________________ > Jboss-development mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/jboss-development > ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en _______________________________________________ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
