Re: Realm/active directory: How do you search for users in different organization?

2008-04-25 Thread Christopher Schultz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thierry,

Thierry Lam wrote:
| Does anyone know how I can specify two different realms so that each
| one of them search a different organization?

I have no experience with it, but my understanding is that JAASRealm is
capable of utilizing multiple sub-realms.

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkgR/6wACgkQ9CaO5/Lv0PDabwCfVrrNq4UarplstmTUNbZQPomP
AxkAoKhWVrXukOV5GEspNIMF7Wrp+6ZL
=/ETM
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Realm/active directory: How do you search for users in different organization?

2008-04-25 Thread Thierry Lam
Does anyone know how I can specify two different realms so that each one of 
them search a different organization?

From: Christopher Schultz [EMAIL PROTECTED]
Sent: Friday, April 25, 2008 10:03 AM
To: Tomcat Users List
Subject: Re: Realm/active directory: How do you search for users in different 
organization?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thierry,

Christopher Schultz wrote:
| userSearch="(&(sAMAccount={0})(|(OU=Mails)(OU=Services))"

Hmm... that might not work. See the last comment on this page:
http://confluence.atlassian.com/display/DEV/How+to+write+a+LDAP+search+filter

Sorry :(

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkgR5JcACgkQ9CaO5/Lv0PB1ygCgpwC5uNOl9a94Kt9Nqo2/6hR9
dc8An3Dzgbpo5M5sZFjqOdc+PBi1iTjS
=tEE5
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Realm/active directory: How do you search for users in different organization?

2008-04-25 Thread Christopher Schultz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thierry,

Christopher Schultz wrote:
| userSearch="(&(sAMAccount={0})(|(OU=Mails)(OU=Services))"

Hmm... that might not work. See the last comment on this page:
http://confluence.atlassian.com/display/DEV/How+to+write+a+LDAP+search+filter

Sorry :(

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkgR5JcACgkQ9CaO5/Lv0PB1ygCgpwC5uNOl9a94Kt9Nqo2/6hR9
dc8An3Dzgbpo5M5sZFjqOdc+PBi1iTjS
=tEE5
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Realm/active directory: How do you search for users in different organization?

2008-04-25 Thread Christopher Schultz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thierry,

Thierry Lam wrote:
| I'm currently using the following realm configuration(Tomcat 5.5) and
| it's working fine:
|
|ldap://domain.com";
| referrals="follow"
| userBase="DC=domain,DC=com"
| userSearch="(sAMAccountName={0})"
| userSubtree="true"
| allRolesMode="strictAuthOnly"
|/>
|
| However, I want to set it up so that I can refine my search in the
| following two specific locations only:
|
| OU=Mails,DC=domain,DC=com
| OU=Services,DC=domain,DC=com
|
| How can I use Realm to do a search in the above two locations only?

You should just have to modify your userSearch to include a more complex
search specification. Something like:

userSearch="(&(sAMAccount={0})(|(OU=Mails)(OU=Services))"

Hope that helps,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkgR5D8ACgkQ9CaO5/Lv0PDxuACgqtIrDRMJYPieKSPP0Aa1RTY5
W+0AnjPDE1cPT+QLltLx/NUNpNV58zOi
=RR1i
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Realm/active directory: How do you search for users in different organization?

2008-04-25 Thread Thierry Lam
I'm currently using the following realm configuration(Tomcat 5.5) and it's 
working fine:

   ldap://domain.com";
referrals="follow"
userBase="DC=domain,DC=com"
userSearch="(sAMAccountName={0})"
userSubtree="true"
allRolesMode="strictAuthOnly"
   />

However, I want to set it up so that I can refine my search in the following 
two specific locations only:

OU=Mails,DC=domain,DC=com
OU=Services,DC=domain,DC=com

How can I use Realm to do a search in the above two locations only?

Thierry

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]