JNDIRealm - mapping LDAP group to security role

2008-09-23 Thread Jérôme Delattre
Hello, Env: Tomcat 6.0.18 / Java 6 / Windows I am trying to configure a JNDIRealm to authenticate against an Active Directory. http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm The authentication seems to work but I wonder how to map LDAP groups to security roles. I do not want

Re: JNDIRealm - mapping LDAP group to security role

2008-09-23 Thread Jérôme Delattre
>> I do not want to add groups in the LDAP server, but to map existing >> ones to the roles defined in my web application instead. > > Perhaps you can use the declaration; look in section 12 > of the servlet spec. > If I remember well the just creates an alias on an existing for servlets. It's

Re: JNDIRealm - mapping LDAP group to security role

2008-09-23 Thread Jérôme Delattre
>> If I remember well the just creates an alias on an >> existing for servlets. >> It's not related to the mapping between my "system" groups and the >> application roles. > > O.k., I'm confused. Isn't an alias just what you need to do the mapping from > any role names used internally in your w

Re: JNDIRealm - mapping LDAP group to security role

2008-09-28 Thread Jérôme Delattre
No idea? I thought it was a common use case ... Jerome 2008/9/23 Jérôme Delattre <[EMAIL PROTECTED]> > Hello, > > Env: Tomcat 6.0.18 / Java 6 / Windows > > I am trying to configure a JNDIRealm to authenticate against an Active > Directory. > http://tomcat.apac

Re: JNDIRealm - mapping LDAP group to security role

2008-10-08 Thread Jérôme Delattre
2008/9/23 Jérôme Delattre <[EMAIL PROTECTED]> > Hello, > > Env: Tomcat 6.0.18 / Java 6 / Windows > > I am trying to configure a JNDIRealm to authenticate against an Active > Directory. > http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm > > The a

Re: JNDIRealm - mapping LDAP group to security role

2008-10-08 Thread Jérôme Delattre
2008/10/8 Caldarale, Charles R <[EMAIL PROTECTED]> > > > From: Felix Schumacher [mailto:[EMAIL PROTECTED] > > Subject: Re: JNDIRealm - mapping LDAP group to security role > > > > have you thought about adding an extra attribute to the > > groups, so that the mapping is done by a normal ldap query?

Re: JNDIRealm - mapping LDAP group to security role

2008-10-08 Thread Jérôme Delattre
2008/10/8 Felix Schumacher <[EMAIL PROTECTED]>: > Hi Jerome, > > have you thought about adding an extra attribute to the groups, so that > the mapping is done by a normal ldap query? > > Consider having an objectClass tomcatRoleMapping which has one attribute > tomcatRole. Than with your mapping li

Re: JNDIRealm - mapping LDAP group to security role

2008-10-09 Thread Jérôme Delattre
2008/10/9 Kevin Jackson <[EMAIL PROTECTED]>: >>> I am trying to configure a JNDIRealm to authenticate against an Active >>> Directory. >>> http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm >>> >>> The authentication seems to work but I wonder how to map LDAP groups >>> to security

Transaction manager

2008-10-15 Thread Jérôme Delattre
Hi, I am looking for a standalone transaction manager for Tomcat. I tried JOTM but there's some blocker bugs in XAPool and the datasource implementation, moreover no new release for 3 years is scary :-) JBossTM works fine but it's under LGPL and unfortunatly I can't use it, too bad :-( Atomikos w

Re: Transaction manager

2008-10-15 Thread Jérôme Delattre
2008/10/15 Jérôme Delattre <[EMAIL PROTECTED]>: > Hi, > > I am looking for a standalone transaction manager for Tomcat. > > I tried JOTM but there's some blocker bugs in XAPool and the > datasource implementation, moreover no new release for 3 years is > scary :

Re: Transaction manager

2008-10-16 Thread Jérôme Delattre
2008/10/15 Jérôme Delattre <[EMAIL PROTECTED]>: > 2008/10/15 Jérôme Delattre <[EMAIL PROTECTED]>: >> Hi, >> >> I am looking for a standalone transaction manager for Tomcat. >> >> I tried JOTM but there's some blocker bugs in XAPool and the >>

Re: Transaction manager

2008-10-16 Thread Jérôme Delattre
to the official > business of Sender. This transmission is of a confidential nature and Sender > does not endorse distribution to any party other than intended recipient. > Sender does not necessarily endorse content contained within this > transmission. > > >> Date: Thu,