> I think Robert is right. You can create your own Realm
> implementation. And JNDIRealm does handle authentication against
> LDAP server. If you configure tomcat in conf/server.xml to use
> JNDIRealm and turn slide security authentication on in
> WEB-INF/web.xml. You will be prompted for enter authentication
> information(user/password for BASIC authentication) when you try
> to access slide resources. If you configure JNDIRealm right(or
> create your own if that not fit your need), when you entered
> user/pass, Tomcat will check it agaist LDAP to see if matches can
> be found and also grab a list of roles according to your
> configuration or implementation. This list of roles from LDAP has
> to have one matches the one of autherized roles at the bottom of
> web.xml. If that happens, then you can touch base with
> WebdavServlet in slide.
> Now question to Jim, When you say "doing all authentication and
> authorization through the IPlanet LDAP
> Directory Server.", do you want to use roles in LDAP for ACL
> inside slide? If that's the case, it's going to be a bit of
exactly.
> chanlleging. Because slide's role implementation is quite
> different, If you look at SecurityImpl's hasRole method, you will
> realize that for a subject to have certain role, that subject has
> to implement certain interface. However, if you change this class
> to use roles provided by LDAP, then basically you can use LDAP
> for autherization in slide also.
> Hope it helps.
Thanks for your help
cheers
</jima>
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
