Hi,

for information and re-use, i succeeded in authentificating users from
groups the way bellow :
- etc/system.properties :
karaf.admin.role=org.apache.karaf.jaas.boot.principal.RolePrincipal:group_to_be_allowed

user.base.dn=OU=Users,[...]
user.filter=(&(objectClass=user)(sAMAccountName=%u))

role.base.dn=OU=Groups,[...]
role.name.attribute=cn
role.filter=(member=CN=%u,OU=Users,[...]
role.search.subtree=true
role.policy=group
authentication=simple

the role base search returns a list of groups and the user is auth if one of
his roles match with the one defined in system.properties.

Christophe.




--
View this message in context: 
http://karaf.922171.n3.nabble.com/Jaas-realm-problem-tp4031391p4031512.html
Sent from the Karaf - User mailing list archive at Nabble.com.

Reply via email to