[jboss-user] [JBoss Portal] - Re: Setting user's roles doesn't trigger Hibernate PreInsert

2009-06-02 Thread bdaw
Look at org.jboss.portal.identity.event package. Then event service is registered in jboss-service.xml: http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4234707#4234707 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4234707 ___

[jboss-user] [JBoss Portal] - Re: JBoss 2.7.0.GA Integration with OpenSSO Under Linux

2009-02-05 Thread bdaw
You still need to have AMConfig.properties file place in AS. The workaround is to install OpenSSS/AM JEE Policy agent (like 2.2 for JBoss) - this will give you AMAgent.properties file. Rename and use it. I will publish update instructions for OpenSSO 8.0 and JBP 2.7.x sometime soon. View the or

[jboss-user] [JBoss Portal] - Re: Admin role ignored when fetched from LDAP

2009-02-05 Thread bdaw
"glwittel-proofpoint" wrote : | I found several fixed Portal bugs surrounding the hardcoded Admin role, but its clear that its not fully fixed. | e.g. |https://jira.jboss.org/jira/browse/JBPORTAL-1733 | Greg, I tried and it seems to work fine. I used LDAP with: Roles: - PortalAdmi

[jboss-user] [JBoss Portal] - Re: Problem with configuring the ldap in jboss portal

2008-09-20 Thread bdaw
When user logs in he enter the password. Then the credentials are passed to the LDAP server to validate them (portal tries to create ldap connection using them). At any stage portal doesn't read the password attribute value from LDAP. The main difference with the DB is that portal reads the hash

[jboss-user] [Security & JAAS/JBoss] - Re: Using LdapLoginModule opens many connections to LDAP

2008-09-18 Thread bdaw
Try enabling JNDI debug (com.sun.jndi.ldap.connect.pool.debug=fine/all also in AS run files). Then you should be able to see how the connections and the pool behaves - and if it works at all... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4177469#4177469 Re

[jboss-user] [Security & JAAS/JBoss] - Re: Using LdapLoginModule opens many connections to LDAP

2008-09-18 Thread bdaw
JNDI connection pooling is configured per JVM using properties. Try to put those in the AS run.conf file. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4177418#4177418 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4177

[jboss-user] [JBoss Portal] - Re: Configuration with two LDAP

2008-09-17 Thread bdaw
Also you can use external JNDI context (described in portal docs) and configure connection with several provider urls. This is supported on the JNDI side. anonymous wrote : "Instead of just one URL, you can also supply a space-separated list of URLs. In this case, the LDAP provider will attempt

[jboss-user] [JBoss Portal] - Re: Problem with configuring the ldap in jboss portal

2008-09-17 Thread bdaw
This attribute name is used only to perform password update (change). Authentication is done directly against LDAP server using user credentials, not by checking and comparing password value. If you want to use different attribute to store password check if your LDAP server enables this. View

[jboss-user] [JBoss Portal] - Re: LDAP authentication using LDAPExtUserModuleImpl is case-

2008-08-20 Thread bdaw
Change your login-config.xml to have: | | | true | | | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171554#4171554 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply

[jboss-user] [JBoss Portal] - Re: IdentityLoginModule not found

2008-04-24 Thread bdaw
Portal Identity module: http://anonsvn.jboss.org/repos/portal/modules/identity/tags/JBP_IDENTITY_1_0_2/ JBoss security http://anonsvn.jboss.org/repos/jbossas/projects/security/security-jboss-sx/tags/2.0.1.GA/jbosssx/src/main/org/jboss/security/auth/spi/ (this is example location as I would nee

[jboss-user] [JBoss Portal] - Re: SynchronizingLoginModule synchronize always

2008-04-23 Thread bdaw
If you want to understand the internals read this: http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/JAASLMDevGuide.html#Intro And look here then: http://anonsvn.jboss.org/repos/portal/modules/identity/branches/JBP_IDENTITY_BRANCH_1_0/identity/src/main/org/jboss/portal/identity/auth/Synchr

[jboss-user] [JBoss Portal] - Re: SynchronizingLoginModule synchronize always

2008-04-23 Thread bdaw
Man... And if you make it "required" instead of "requred"? The synchronization happens in the commit() method - it happens always when authentication in whole LoginModule's stack overall is successful. Configure it properly to make it fail... View the original post : http://www.jboss.com/index

[jboss-user] [JBoss Portal] - Re: MembershipModule getUsers bug?

2008-04-22 Thread bdaw
This is a bug: http://jira.jboss.com/jira/browse/JBPORTAL-1708 You will find temporary workaround in jira description. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4145968#4145968 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mod

[jboss-user] [JBoss Portal] - Re: SynchronizingLoginModule synchronize always

2008-04-22 Thread bdaw
Its all in the docs: http://docs.jboss.com/jbportal/v2.6.4/referenceGuide/html/authentication.html#authentication.synchronizing_login_module anonymous wrote : | It leverages the fact that in JAAS authentication process occurs in two phases. In first phase when login() method is invoked it alw

[jboss-user] [JBoss Portal] - Re: Portal LDAP integration problems

2008-04-18 Thread bdaw
and one more thing for the configuration. You are right that timeout setting for LDAPConnectionContext doesn't work. It seesm that these option must be specified in java opts as you did: http://java.sun.com/products/jndi/tutorial/ldap/connect/config.html anonymous wrote : "Note that these are s

[jboss-user] [JBoss Portal] - Re: Portal LDAP integration problems

2008-04-18 Thread bdaw
btw. I'm not sure your take on TIME_WAIT is correct. Creating a connection is costly so keeping the pool of open ones and reuse gives performance gain. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4145100#4145100 Reply to the post : http://www.jboss.com/in

[jboss-user] [JBoss Portal] - Re: Portal LDAP integration problems

2008-04-18 Thread bdaw
I improved the code a bit and with my test number of open connections always remains low and related to poolingMaxsize. Could you try it out? http://anonsvn.jboss.org/repos/portal/modules/identity/branches/JBP_IDENTITY_BRANCH_1_0/ View the original post : http://www.jboss.com/index.html?module

[jboss-user] [JBoss Portal] - Re: Portal LDAP integration problems

2008-04-06 Thread bdaw
This indeed looks like a bug. Could you create a JIRA with a patch and reference to this thread? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4141948#4141948 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4141948 _

[jboss-user] [JBoss Portal] - Re: Disabling the user registered in portal database in jbos

2008-04-02 Thread bdaw
Now its in JBP_USER_PROP. Set property "portal.user.enabled" (ot User.INFO_USER_ENABLED using UserProfileModule) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4141155#4141155 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply

[jboss-user] [JBoss Portal] - Re: Portal LDAP integration problems

2008-04-02 Thread bdaw
Portal uses standard JNDI pooling. For the JNDI configuration look here: http://java.sun.com/products/jndi/tutorial/ldap/connect/pool.html http://java.sun.com/products/jndi/tutorial/ldap/connect/config.html Options set in ldap_identity-config.xml and standardidentity-config.xml are mapped direct

[jboss-user] [JBoss Portal] - Re: Pulling password from JBoss (JBP_USERS) directly

2008-03-22 Thread bdaw
Portal uses this to compare password: http://anonsvn.jboss.org/repos/portal/modules/common/trunk/common/src/main/java/org/jboss/portal/common/util/Tools.java Method md5AsHexString() View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4138412#4138412 Reply to the po

[jboss-user] [JBoss Portal] - Re: Pulling password from JBoss (JBP_USERS) directly

2008-03-22 Thread bdaw
its hashAlgorithm - MD5 and hashEncoding - HEX View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4138408#4138408 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4138408 ___ jboss-us

[jboss-user] [JBoss Portal] - Re: Best practice: secure direct web app access

2008-03-20 Thread bdaw
You can avoid double login (in portal after webapp) using Tomcat SSO valve. Look here: http://docs.jboss.com/jbportal/v2.6.4/referenceGuide/html/sso.html#d0e9623 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4138099#4138099 Reply to the post : http://www.jb

[jboss-user] [JBoss Portal] - Re: using DBIdentityLoginModule creates an infinite redirect

2008-03-19 Thread bdaw
Authorization can't work as while you are pointing your DB for authentication, default portal DB is used for authorization via identity modules. Option would be to enable SynchronizingLoginModule together with DBIdentityLoginModule and sync authenticated user/roles into portal DB. View the orig

[jboss-user] [JBoss Portal] - Re: PermGen Space

2008-03-14 Thread bdaw
In the AS /bin directory look for the run.conf file. You need to make it: if [ "x$JAVA_OPTS" = "x" ]; then |JAVA_OPTS="-Xms128m -Xmx512m -XX:PermSize=128m -Dsun.rmi.dgc.client.gcInterval=360 -Dsun.rmi.dgc.server.gcInterval=360" | fi View the original post : http://www.jboss.com

[jboss-user] [JBoss Portal] - Re: Auto-login on JBoss Portal

2008-03-11 Thread bdaw
Look at the Reference Guide: http://docs.jboss.com/jbportal/v2.6.4/referenceGuide/html/sso.html You configure valve in context.xml file. If you login using your IdP site then you probably have some kind of token present in request (cookie or something) right? Recognize this in a valve and the

[jboss-user] [JBoss Portal] - Re: Auto-login on JBoss Portal

2008-03-10 Thread bdaw
You can consider integrating using tomcat valve. Read about CAS and JOSSO configuration in the Reference Guide and look at the source code: http://anonsvn.jboss.org/repos/portal/modules/identity/branches/JBP_IDENTITY_BRANCH_1_0/sso/src/main/org/jboss/portal/identity/sso/cas/ http://anonsvn.jboss.

[jboss-user] [JBoss Portal] - Re: get UserModule via lookup exception

2008-03-09 Thread bdaw
You need to set this in jboss-portlet.xml: | |MyPortlet |Required | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4135133#4135133 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4135133 ___

[jboss-user] [JBoss Portal] - Re: How to build custom User/Role/UserProfile/Membership Mod

2008-03-08 Thread bdaw
For the schema differences you can change identity-profile.xml file. http://wiki.jboss.org/wiki/Wiki.jsp?page=PortalSVNRepo Identity module is built separately from the portal. For 2.6.4 you need: http://anonsvn.jboss.org/repos/portal/modules/identity/tags/JBP_IDENTITY_1_0_2/ DB implementation:

[jboss-user] [JBoss Portal] - Re: Encrypted LDAP admin passwords

2007-11-23 Thread bdaw
Users must belong to 'Authenticated' role - this is security part defined in poratl server web.xml. Look into Reference Guide documentation for more info. In identity-config.xml you can't put encrypted password View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=410

[jboss-user] [JBoss Portal] - Re: Refreshing user membership information without logoff

2007-11-23 Thread bdaw
http://wiki.jboss.org/wiki/Wiki.jsp?page=SecurityFAQ Check Q11. Roles assignment is kept by JAAS until user logout View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4107330#4107330 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=rep

[jboss-user] [JBoss Portal] - Re: Need help with debugging

2007-11-23 Thread bdaw
roth, I will try to look at this issue next week. Meanwhile I fixed a bug related to permission check - don't know if its related but could you try with the latest JBoss_Portal_Branch_2_6 sources? Could you fill the jira issue and describe the exact setup to reproduce this? View the original p

[jboss-user] [JBoss Portal] - Re: Is this a JBP 2.6.1 bug? (403 Error From Dashboard Link)

2007-11-23 Thread bdaw
http://jira.jboss.com/jira/browse/JBPORTAL-1779 Related bug is fixed for 2.6.3. You can check with sources from svn. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4107313#4107313 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=r

[jboss-user] [JBoss Portal] - Re: Dashboard 403 error

2007-11-23 Thread bdaw
http://jira.jboss.com/jira/browse/JBPORTAL-1779 Related bug is fixed for 2.6.3. You can check with sources from svn. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4107312#4107312 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=r

[jboss-user] [JBoss Portal] - Re: LDAP / JNDI Class Cast Exception

2007-11-21 Thread bdaw
http://jira.jboss.com/jira/browse/JBPORTAL-1812 This will be fixed in 2.6.3. You can try it from svn before the release View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4106809#4106809 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mod

[jboss-user] [JBoss Portal] - Re: no user synchronization

2007-11-09 Thread bdaw
Its happening in DelegatingUserProfileModule which you can remove from the config. You also need to update the mappings in profile-config.xml. The problem is that LDAP doesn't provide attributes for all the properties that portal stores for user. You can handle it in your own implementation. Vi

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-11-02 Thread bdaw
Leave identity-config.xml untouched (db configuration), in login-config.xml comment out IdentityLoginConfig, and use SynchronizingLoginModule or SynchronizingExtLoginModule with options 'synchronizeIdentity' and 'synchronizeRoles' set to 'false'. Then you'll have to keep users between LDAP and

[jboss-user] [JBoss Portal] - Re: portal ldap problems

2007-11-02 Thread bdaw
Can you fill a jira bug report for this? We cache user identity on authentication to not bind on every request. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101189#4101189 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply

[jboss-user] [JBoss Portal] - Re: LDAP Authentication & Authorization to eDirectory

2007-11-02 Thread bdaw
For the "seeAlso" errors - edit profile-config.xml and comment out proper ldap attribute mapping. What exactly did you put in login-config.xml ? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101184#4101184 Reply to the post : http://www.jboss.com/index.html

[jboss-user] [JBoss Portal] - Re: Problems with SynchronizingLoginModule

2007-11-02 Thread bdaw
Hi, Could you fill in a jira bug report for this and assign to me? I'll look at it for 2.6.3 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101182#4101182 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4101182

[jboss-user] [JBoss Portal] - Re: LDAP / JNDI Class Cast Exception

2007-11-02 Thread bdaw
Hi, Sorry for not replying earlier. Could you fill in a bug report in JIRA, assign it to me and put a fix version for 2.6.3? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101176#4101176 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posti

[jboss-user] [JBoss Portal] - Re: Can not get user role from LDAP server

2007-10-01 Thread bdaw
Try the tutorial then: http://jbossportal.blogspot.com/2007/06/ldap-support-tutorial-for-jboss-portal.html http://jbossportal.blogspot.com/2007/07/ldap-support-tutorial-for-jboss-portal.html View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4090107#4090107 Reply

[jboss-user] [JBoss Portal] - Re: Can not get user role from LDAP server

2007-09-30 Thread bdaw
Im really suprised that "org.jboss.security.auth.spi.LdapExtLoginModule" has something to do with options like "userModuleJNDIName" or "additionalRole". What is in your identity-config.xml? Did you read "LDAP" chapter in portal ReferenceGuide or tried to follow LDAP tutorial from blog? View the

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-09-28 Thread bdaw
Your config is wrong. http://docs.jboss.com/jbportal/v2.6/referenceGuide/html/authentication.html#authentication.synchronizing_login_module "This module is designed to provide synchronization support for any other LoginModule placed in the authentication stack." So in your particular case you

[jboss-user] [JBoss Portal] - Re: LDAP Connection error

2007-09-24 Thread bdaw
You have | | externalContextJndiName | external/ldap/jboss | | uncommented. Using this all other LDAP connection options are ignored. Did you read the docs? http://docs.jboss.com/jbportal/v2.6/referenceGuide/html/ldap.html#d0e6811 If you configure all modules in

[jboss-user] [JBoss Portal] - Re: Configuring external SSO solution (LDAP)

2007-09-10 Thread bdaw
Implement your own JAAS LoginModule like this one: http://docs.jboss.com/jbportal/v2.6/referenceGuide/html/authentication.html#authentication.synchronizing_login_module Source code is quite simple so you can alter existing one. View the original post : http://www.jboss.com/index.html?module=bb&

[jboss-user] [JBoss Portal] - Re: Portal 2.6 LDAP Authentication

2007-08-24 Thread bdaw
yes and no Basically the reason about synchronization to DB is because you cannot map all needed user properties to LDAP attributes. So in theory, you can: 1) Alter profile-config.xml and make all properties map to LDAP (its tough as LDAP schema is limited) 2) in identity-config.xml get rid of

[jboss-user] [JBoss Portal] - Re: Portal 2.6 LDAP Authentication

2007-08-24 Thread bdaw
yes it is: http://jbossportal.blogspot.com/2007/06/ldap-support-tutorial-for-jboss-portal.html View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4077685#4077685 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4077685 ___

[jboss-user] [JBoss Portal] - Re: LDAP Authentication

2007-08-22 Thread bdaw
ouch... this doesn't look nice idneed. Could you file a bug in JIRA? Thanks for digging in! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4076859#4076859 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4076859 __

[jboss-user] [JBoss Portal] - Re: LDAP Authentication

2007-08-22 Thread bdaw
I'm not very knowledgeable about cms internal but on the first portal run it creates some stuff based on what it finds in identity store. Look at jboss-beans-security.xml in cms module. You'll find definitions of priviligas related to Anonymous, User and Admin roles type access. Did you try to a

[jboss-user] [JBoss Portal] - Re: LDAP Authentication problem

2007-08-16 Thread bdaw
Besides the documentation those can be useful: http://jbossportal.blogspot.com/2007/06/ldap-support-tutorial-for-jboss-portal.html http://jbossportal.blogspot.com/2007/07/ldap-support-tutorial-for-jboss-portal.html http://wiki.jboss.org/wiki/Wiki.jsp?page=ConfigurePortalForMicrosoftActiveDirectory

[jboss-user] [JBoss Portal] - Re: IdentityException

2007-08-16 Thread bdaw
First - Why do you have both IdentityLoginModule setup against LDAP and LdapExtLoginModule in your login-config.xml? Also I see that you even failed to authenticate using the second one which doesn't seem to be portal related issue. View the original post : http://www.jboss.com/index.html?modu

[jboss-user] [JBoss Portal] - Re: SynchronizingLDAPExtLoginModule

2007-08-16 Thread bdaw
Yes, synchronization is one way. LDAP --> DB. The source code is quite simple if you need to alter its behaviour: http://anonsvn.jboss.org/repos/portal/branches/JBoss_Portal_Branch_2_6/identity/src/main/org/jboss/portal/identity/auth/SynchronizingLDAPExtLoginModule.java View the original post :

[jboss-user] [JBoss Portal] - Re: update user password

2007-08-16 Thread bdaw
As far as I know MSAD requires you to have SSL connection to LDAP to alter password entry. I have never tried to setup this so please let me know if it works for you. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4074978#4074978 Reply to the post : http://w

[jboss-user] [JBoss Portal] - Re: Memory Leak

2007-07-25 Thread bdaw
Its quite well known issue that when you hot redeploy bigger webapp dozen of times you end up with out of memory exception. As far as I remember its related to garbage collection issues with Class class and its more related to Java than AS. Normaly - never use hot redeployment in production and

[jboss-user] [JBoss Portal] - Re: Calling JAAS

2007-07-24 Thread bdaw
A much better place to share knowledge would be JBoss Portal Wiki (http://jboss.org/wiki/Wiki.jsp?page=JBossPortal). View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4067088#4067088 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=r

[jboss-user] [JBoss Portal] - Re: How Authentication & Authorization is working in JBoss P

2007-07-24 Thread bdaw
I cannot understand what your question is about. Help us help you. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4066981#4066981 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4066981

[jboss-user] [JBoss Portal] - Re: LDAPExtUserModuleImpl and userSearchFilter

2007-07-24 Thread bdaw
I'm playing with this. So with such ldif: | | dn: dc=example,dc=com | objectclass: top | objectclass: dcObject | objectclass: organization | dc: example | o: example | | dn: dc=portal,dc=example,dc=com | objectclass: top | objectclass: dcObject | objectclass: organizati

[jboss-user] [JBoss Portal] - Re: How Authentication & Authorization is working in JBoss P

2007-07-24 Thread bdaw
http://docs.jboss.com/jbportal/v2.6/reference-guide/html/authentication.html http://docs.jboss.com/jbportal/v2.6/reference-guide/html/security.html#security.security_authentication View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4066933#4066933 Reply to the post

[jboss-user] [JBoss Portal] - Re: how can i get current PortalNode

2007-07-23 Thread bdaw
Unsupported major.minor version This usually means that you are trying to run classes under lower Java version than the one used to build them - like compile under 1.6 and run under 1.5 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4066656#4066656 Reply to t

[jboss-user] [JBoss Portal] - Re: How to implement external Authentication and Authorizati

2007-07-23 Thread bdaw
You are still not clear. You can use the same security domain in your web app and portal. You can modify portal login-config.xml and plugin any LoginModule implementation you want. http://docs.jboss.com/jbportal/v2.6/reference-guide/html/authentication.html View the original post : http://www.

[jboss-user] [JBoss Portal] - Re: LDAP Authentication

2007-07-23 Thread bdaw
I think you will see this only during the first startup. When you switch identity store to LDAP you need to provide default admin user/role - admin/Admin - for administration. This is needed by CMS. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4066568#406656

[jboss-user] [JBoss Portal] - Re: LDAPExtUserModuleImpl and userSearchFilter

2007-07-17 Thread bdaw
Got it! At the moment I'm on different things but I will look at it later this week, and will let you know here. Big thanks for being so proactive with this! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4064967#4064967 Reply to the post : http://www.jboss.

[jboss-user] [JBoss Portal] - Re: LDAPExtUserModuleImpl and userSearchFilter

2007-07-17 Thread bdaw
So to be clear - when you use double backslash coma in ldapsearch you get correct result but this still doesn't work in portal config? It may be a bug but I think that the usage of filter is as simple as passing it to the JNDI API. Could you try enabling DEBUG logging for package 'org.jboss.por

[jboss-user] [JBoss Portal] - Re: LDAPExtUserModuleImpl and userSearchFilter

2007-07-12 Thread bdaw
It happens to everyone time to time :) I updated blog post like you suggested. I think that you shouldn't have many problems with MSAD. The one I'm aware of is the password change (can be done by portal users). As far as I know MSAD requires you to use SSL connection to let you update related a

[jboss-user] [JBoss Portal] - Re: LDAPExtUserModuleImpl and userSearchFilter

2007-07-12 Thread bdaw
Please try: I would be very interested to learn if you succeeded with MSAD. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4063369#4063369 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4063369

[jboss-user] [JBoss Portal] - Re: DatabaseServerLoginModule

2007-07-05 Thread bdaw
anonymous wrote : select userRoles, 'Roles' from UserRoles where username=? Actually - where is the UserRoles table? Are you using portal one? Are you sure that relationship is defined properly in your database? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=40

[jboss-user] [JBoss Portal] - Re: JBOSS Portal 2.6 and OpenLDAP (looking for an example ld

2007-07-02 Thread bdaw
Actually... you have userCTX ,dc=fatwire,dc=com (good point bvogt!) and you are complaining that cn=admin,ou=People,dc=example,dc=com can't be retrieved? I think that primary issue here is that your configuration doesn't fit ldif you use. View the original post : http://www.jboss.com/index.h

[jboss-user] [JBoss Portal] - Re: JBOSS Portal 2.6 and OpenLDAP (looking for an example ld

2007-07-02 Thread bdaw
Hi, Could you post some bigger part of stack trace? Preferably with a cause containing org.jboss.portal.identity.* classes View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4059741#4059741 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting

[jboss-user] [JBoss Portal] - Re: Ldap authentication on Jboss portal 2.6 cr2

2007-06-05 Thread bdaw
Please read: http://cruisecontrol.jboss.com/cc/artifacts/jboss-portal-latest-doc/referenceGuide//html/identity.html#d0e5664 (and the rest of the chapter) If you compare content of files 'standardidentity-config.xml' and 'ldap_identity-config.xml' you will find that the 'name' makes a link to pr

[jboss-user] [JBoss Portal] - Re: Ldap authentication on Jboss portal 2.6 cr2

2007-06-04 Thread bdaw
At the moment JBoss Portal 2.6 is tested with Red Hat Directory Server, OpenDS and OpenLDAP. We aim to add Novel and MSAD to this set later. http://cruisecontrol.jboss.com/cc/artifacts/jboss-portal-latest-doc/referenceGuide//html/ldap.html#d0e7177 There is no LDAP bundled with JBoss AS at the m

[jboss-user] [JBoss Portal] - Re: Ldap authentication on Jboss portal 2.6 cr2

2007-06-04 Thread bdaw
1) There were few minor bugs in CR2 - could you try with latest sources from svn? http://anonsvn.jboss.org/repos/portal/trunk 2) MSAD is not officially supported at the moment, but I believe that base features should work. 3) Could you look at the server output and provide more information and

[jboss-user] [JBoss Portal] - Re: LDAP Authentication & Authorization to eDirectory

2007-05-23 Thread bdaw
anonymous wrote : Emptying the database to start over just generated reams of errors from the JBPM module. what kind of errors? Could you be a little more specific? So you were able to deploy a portal using an empty database before, and then turning off the AS, cleaning the database and turnin

[jboss-user] [JBoss Portal] - Re: LDAP Authentication & Authorization to eDirectory

2007-05-23 Thread bdaw
a lot of questions in your posts :) ... lets start from the beginning. I'm sure that the issue with disabled account should be resolved in newest sources. Did you flush the database content? Please try to redeploy portal from the newest sources, start with clean database, and let me know if you

[jboss-user] [JBoss Portal] - Re: LDAP Authentication & Authorization to eDirectory

2007-05-22 Thread bdaw
Hi. I'm aware that there was a bug related to this in CR2. At first could you try with newest sources from svn? To build portal from sources you need to do: svn co http://anonsvn.jboss.org/repos/portal/trunk/ jboss-portal-2.6 and then with JBOSS_HOME env set do ./build/build.sh deploy ./core-adm

[jboss-user] [JBoss Portal] - Re: Trouble creating user on the fly programatically

2007-04-23 Thread bdaw
yes. or look here http://anonsvn.jboss.org/repos/portal/trunk/identity/src/main/org/jboss/portal/identity/auth/IdentityLoginModule.java and cover UserModule usage with same code for JTA as you as I understand you implement LoginModule View the original post : http://www.jboss.com/index.html?modu

[jboss-user] [JBoss Portal] - Re: where can I download portal 2.6.CR1

2007-04-23 Thread bdaw
Release process takes few days. At the moment you can grab it from svn and archive should be available soon: http://anonsvn.jboss.org/repos/portal/tags/JBoss_Portal_2_6_0_CR1/ View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4039759#4039759 Reply to the post :

[jboss-user] [JBoss Portal] - Re: Failing to login using LDAP UserModule

2007-04-23 Thread bdaw
"maph2880" wrote : | I am using the LDAPUserModuleImpl user module.. For the user module, i have specified the common properties for userCtxDN and uidAttributeID. For the Role and Membership modules, I am using DB. | I thing the simple reason is that you are mixing UserModule from LDAP

[jboss-user] [JBoss Portal] - Re: LDAP authentication working, but

2007-04-02 Thread bdaw
You configured authentication only. It's not possible to manage users in LDAP in JBP 2.4. You would need to implement UserModule and RoleModule or backport SynchronizingLoginModule from JBP 2.6 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4033898#4033898 Re

[jboss-user] [JBoss Portal] - Re: login by DatabaseServerLoginModule, but fail to access P

2007-03-29 Thread bdaw
You must fulfill security constraints in portal servlet mapping for authenticated user. http://cruisecontrol.jboss.com/cc/artifacts/jboss-portal-latest-doc/referenceGuide/html/authentication.html View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4032656#4032656

[jboss-user] [JBoss Portal] - Re: Portal Authentication with Acegi

2007-03-19 Thread bdaw
I made http://wiki.jboss.org/wiki/Wiki.jsp?page=PortalWithAcegiAuthentication Feel free to update. Thanks! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4029259#4029259 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4

[jboss-user] [JBoss Portal] - Re: Problem configuring the LDAP extended role module

2007-03-15 Thread bdaw
This is fixed in SVN trunk. You can try building portal from sources or wait for the CR1. Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4028381#4028381 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4028381 ___

[jboss-user] [JBoss Portal] - Re: Problem configuring the LDAP extended role module

2007-03-14 Thread bdaw
yes. I'm able to reproduce and looking at it. Thanks for report. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4028192#4028192 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4028192 __

[jboss-user] [JBoss Portal] - Re: LDAP authentication and Role-based permissions question

2007-03-13 Thread bdaw
"ndrw_cheung" wrote : | I thought the LDAP server is only used for authentication and not for looking up the role permissions by the portal if I use LDAPLoginModule. Therefore I thought I have to enter into the database the user and the role it is assigned to. Could you please explain in mor

[jboss-user] [JBoss Portal] - Re: Using alternative source for JBoss Portal authentication

2007-03-13 Thread bdaw
"engela" wrote : | I haven't had the time to try to integrate my portal with Acegi yet. If I can figure out how, I will post it here. | If you figure out could you create a wiki page for it? http://wiki.jboss.org/wiki/Wiki.jsp?page=JBossPortal Many people asked about Acegi and its easier

[jboss-user] [JBoss Portal] - Re: LDAP authentication and Role-based permissions question

2007-03-13 Thread bdaw
I think the reason is: 2007-03-12 09:55:17,703 DEBUG [org.apache.catalina.realm.RealmBase] Username abc does NOT have role finance something in your configuration or LDAP tree must be wrong and 'abc' doesn't get principal 'finance' assigned. View the original post : http://www.jboss.com/inde

[jboss-user] [JBoss Portal] - Re: Using alternative source for JBoss Portal authentication

2007-03-09 Thread bdaw
It will work if you make: | | first=Administrators,Admin,Authenticated | second=Users,User,Authenitcated | "Authenticated" is the role used to secure portal servlet. look into jboss-portal.sar\portal-server.war\WEB-INF\web.xml Yes, with such configuration you need to synchronize user

[jboss-user] [JBoss Portal] - Re: LDAP authentication and Role-based permissions question

2007-03-09 Thread bdaw
I just tried your configuration and it seemed to work. Didn't put things into database. Just test if users are authenticated correctly and are able to enter portal. I used this ldif file and changed: 1) login-config.xml: | | com.sun.jndi.ldap.LdapCtxFactory |

[jboss-user] [JBoss Portal] - Re: Custom Login

2007-02-25 Thread bdaw
jbosssx.jar contains stuff for org.jboss.security.* But I'm wondering what do you mean by "use a method"... UserPasswordLoginModule is an abstract class. What exactly do you want to do? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4022122#4022122 Reply to t

[jboss-user] [JBoss Portal] - Re: Custom Login

2007-02-24 Thread bdaw
I don't know exactly what you want to do but here are the sources you are talking about: http://anonsvn.jboss.org/repos/jbossas/projects/security/trunk/src/main/org/jboss/security/auth/spi/UsernamePasswordLoginModule.java http://anonsvn.jboss.org/repos/portal/branches/JBoss_Portal_Branch_2_4/iden

[jboss-user] [JBoss Portal] - Re: source compile error because can not find the apacheds-c

2007-02-23 Thread bdaw
Just try to build from commandline (PORTAL_SRC/build/build.sh) and all thirdparty libs will be downloaded View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4021527#4021527 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4021

[jboss-user] [JBoss Portal] - Re: IntelliJ Idea project for JBoss Portal 2.6

2007-02-21 Thread bdaw
1) the cleanest way is to create a multimodule project in portal sources dir and then manually add all .iml files as new modules to the project 2) we don't build portal inside intellij - we just edit sources there and build using command line and ant scripts 3) the issue you have with build.sh is

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-02-19 Thread bdaw
Happy to hear that :) Look here. It's the second login module (commented). It's just a quick prototype so it's not much tested but should work. The code is also quite simple (ext one here: here) We may think about providing something more general to use with any login module if there will be

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-02-19 Thread bdaw
I recently added SynchronizingLdapLoginModule that extends LdapLoginModule from JBossSX and SynchronizingLdapExtLoginModule that does the same for LdapExtLoginModule You can use them to - just authenticate against LDAP + inject additional role principal which is used to secure portal applicati

[jboss-user] [JBoss Portal] - Re: How to get UserName or Password or Profile

2007-02-14 Thread bdaw
Depends on which version you are using. In 2.4 you can obtain a User object from UserModule and ivestigate it's properties. In 2.6 you can use UserProfileModule View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4016294#4016294 Reply to the post : http://www.jbo

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-02-14 Thread bdaw
Not sure how you set up this. For 2.6 just use instructions from wiki http://wiki.jboss.org/wiki/Wiki.jsp?page=Identity_and_Authentication_in_JBoss_Portal_2_6 or wait few days for Beta with a bit more helpfull documentation in Reference Guide View the original post : http://www.jboss.com/index.h

[jboss-user] [JBoss Portal] - Re: HOWTO: Replace portal authentication and authorization

2007-02-13 Thread bdaw
arnieAustin: UserModule and RoleModule are interfaces that you need to implement. UserModuleImpl and RoleModuleImpl are JBP implementation you can use as an example. To plug in your implementation change those class names in core/src/resources/portal-sar/META-INF/jboss-service.xml dleerob: Di

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-02-07 Thread bdaw
In 2.4.1: - yes for authentication (LdapLoginModule) - no for user management - you will need to manually implement UserModule and RoleModule interfaces for that. You can use example MSAD implementation as a reference (http://jira.jboss.com/jira/browse/JBPORTAL-464) In 2.6 there is buildin suppo

[jboss-user] [JBoss Portal] - Re: JBoss Portal LDAP Setup

2007-02-06 Thread bdaw
Basic instructions for setuping LDAP as source of user/roles information for portal (not only authentication) in 2.6 can be found here: http://wiki.jboss.org/wiki/Wiki.jsp?page=Identity_and_Authentication_in_JBoss_Portal_2_6 There is some more info in docs for 2.6 alpha2 View the original post

[jboss-user] [JBoss Portal] - Re: Custom Authentication

2007-01-18 Thread bdaw
First of all PortalDS is not only for users. Portal objects, security and etc. is persisted there. Then rhere are two separate issues here: 1) Users management - so you can keep users in any other place. Abstraction is made by implementing UserModule and RoleModule (in 2.4) plus MembershipModule

  1   2   >