Wow, well I didn't think I would get it working, but thanks to you and
Google I did.

Now I just have to add roles to LDAP to limit access to some pages and I'm
all set.

Thanks again,

Dylan MacDonald


-----Original Message-----
From: Mark R. Diggory [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 5:22 PM
To: Tag Libraries Users List
Subject: Re: JSTL and LDAP


You can use the Realm of the Tomcat server to authenticate users and
match them to roles (basically Groups stored in the ldap server). If you
do this then you don't really need to use taglibs to manage the login.
You just have to configure your web.xml with a login-config and the
server.xml with a JNDI Realm.

The Tomcat examples/documentation shows how to do this fairly well:
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html#JNDIRealm

I've had to do some tweeks of this in the past to work with our freakn'
wierd LDAP configuration (again, entirely my own fault).

There is the JNDI taglibrary, which could be used in conjunction with an
LDAP server to determine if a user could bind to an LDAP server, but I
wouldn't recommend using it for that specifically, thats what JNDIRealm
is primarily for.

-Mark

Dylan MacDonald wrote:

> Hi -
>
> I am just beginning to use the JSTL and my first project is redoing our
> company's intranet.  Currently we use LDAP to provide authentication.
This
> is done via a .htaccess file in the root of the site and the LDAP mod for
> Apache.
>
> I would like to convert this to either a Tomcat realms configuration or
> (even better) a JSP login page that communicates with the LDAP server.
Does
> anyone have any advice (ideally with code samples) about how to do this?
Do
> the JSTL taglibs have some kind of LDAP support built in or are there
other
> taglibs that provide this kind of functionality?  I haven't had much luck
> with my syntax in the <Realm /> section of the server.xml.
>
> Thanks in advance!
>
> Dylan MacDonald
> <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>
>

--
Mark Diggory
Software Developer
Harvard MIT Data Center
http://osprey.hmdc.harvard.edu

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to