JNDIRealm works by retrieving the password from the directory server and 
comparing it explicitly with the value given by
the user. Unfortunately AFAIK this mode of operation will not work with 
eDirectory.

There have been proposals (e.g. from me) to enhance JNDIRealm to allow it 
to authenticate the user by binding to the directory server, in the same 
way as auth_ldap. This should work with eDirectory, but isn't available yet.

John.


At 12:55 28/01/02, you wrote:
>Hi!
>
>We are going to upgrade to Tomcat and are investigating how to implement
>user authentication. Currently we are using the authentication that is
>offered in Apache with auth_ldap.
>
>Since Tomcat offers an authentication mechanism (Realms) we would like
>to use that functionality. However since we are using Novell NDS
>(eDriectory) to store our users and have several NDS servers, we would
>like to have Tomcat to authenticate a user against one or more of the
>NDS servers. Is this possible?
>
>As far as I can see the JNDIRealm can only handle a single server to
>authenticate users against.
>
>--
>Fredrik Westermarck
>
>--
>To unsubscribe:   <mailto:[EMAIL PROTECTED]>
>For additional commands: <mailto:[EMAIL PROTECTED]>
>Troubles with the list: <mailto:[EMAIL PROTECTED]>



--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to