You may have a problem with roles rather than authentication.  We are doing 
something similar against OpenLDAP.  In jboss-portal.sar/conf/login-config.xml, 
we have this:

  | <application-policy name="portal">
  |  <authentication>
  |    <login-module code="org.jboss.security.auth.spi.LdapLoginModule" 
flag="required">
  |      <module-option name="password-stacking">useFirstPass</module-option>
  |      <module-option 
name="java.naming.provider.url">ldap://yourhost:389/</module-option>
  |      <module-option 
name="java.naming.security.authentication">simple</module-option>
  |      <module-option name="principalDNPrefix">uid=</module-option>
  |      <module-option 
name="principalDNSuffix">,ou=people,dc=company</module-option>
  |    </login-module>
  |   <login-module code="org.jboss.portal.core.security.jaas.ModelLoginModule" 
flag="required">
  |      <module-option name="unauthenticatedIdentity">guest</module-option>
  |      <module-option name="hashAlgorithm">MD5</module-option>
  |      <module-option name="hashEncoding">HEX</module-option>
  |      <module-option 
name="userModuleJNDIName">java:/portal/UserModule</module-option>
  |      <module-option name="additionalRole">Authenticated</module-option>
  |      <module-option name="password-stacking">useFirstPass</module-option>
  |   </login-module>
  |  </authentication>
  | </application-policy>
  | 

So, the authentication is via LDAP and the roles come from the Portal database, 
meaning that you have to define your users in both places.  This may not be 
exactly what you want, but it may be worth trying just so you can verify that 
the LDAP authentication is working.

Regards,
Scott Dawson
Unisys


View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3920423#3920423

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3920423


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to