On Wed, 2 Apr 2003 15:33:42 -0600
"Jonathan Eric Miller" <[EMAIL PROTECTED]> wrote:

> JNDIRealm is broken and unusable.
really? on what version?. Because it's working not so bad in 4.1.18.
realm documentation is good for this.

exemple of conf in server.xml:
<Valve className="org.apache.catalina.authenticator.SingleSignOn" 
debug="0"/>
<Realm   className="org.apache.catalina.realm.JNDIRealm"
  debug="99" 
  connectionName="cn=ldapadmin,ou=admin,o=XXXX"             
  connectionPassword="YYYYYYYYY"             
  connectionURL="ldap://zz.zz.zz.zz:389";             
  userPassword="userPassword"             
userPattern="uid={0},ou=users,ou=jetspeed,ou=applications,ou=fr,o=XXXX" 
roleBase="ou=groups,ou=tomcat,ou=jetspeed,ou=applications,ou=fr,o=XXXX" 
  roleName="cn"
  roleSearch="(uniqueMember={0})" />

      ...
       </Host>
    </Engine>
  </Service>

you can use the ldif in the documentation and change the path dn to
userPattern and roleBase. I'm using tomcat with jetspeed ldap and it's
not simple.

in some condition (ldap correctly configure) you can delete the two
lines
    connectionName="cn=ldapadmin,ou=admin,o=XXXX"
    connectionPassword="YYYYYYYYY"
and use the ldap binding with encrypted passwords 
Cordialy.

> 
> Jon
> 
> ----- Original Message -----
> From: "Karamat Adil IHMD" <[EMAIL PROTECTED]>
> To: "'Tomcat Users List'" <[EMAIL PROTECTED]>
> Sent: Wednesday, April 02, 2003 2:08 PM
> Subject: Tomcat with LDAP
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to