Shelly: Let me help with number 3 The typical standard for anonymous binding is to specify a name and password of "" "" for both. I am not sure if JNDI will pass this ok-give it a try.
3. How to use an anonymous password for binding instead of using connectionName/connectionPassword? Shelly wrote: > Hello, > > I'm running Tomcat 4 on Unix and trying to use JNDIRealm for > authentication. > I use Netscape DAP server, and the hierarchy of entries in the directory > is > > o=My Company > | > +---------------+---------------+ > | | | > ou=People ou=Groups ... > | > +-------+-------+ > | | > ou=Employee ... > | > +-----+-----+ > | | | > enum=001 ... enum=111 > > However, the logic attribute is uid. > > When I do a search for a valid uid, it returns null. > > If I use DirContext.listBindings("") to get name-to-objects, no object > returns; (Please see code below). > If I use DirContext.listBindings("o=My Company") to get name-to-objects, > it returns (Name: ClassName: Object): > ou=Resources: com.sun.jndi.ldap.LdapCtx: > com.sun.jndi.ldap.LdapCtx@586fd3 > ou=People: com.sun.jndi.ldap.LdapCtx: com.sun.jndi.ldap.LdapCtx@586jhk > ... > > Hash table en = new Hash table(); > env.put(Context.INITIAL_CONTEXT_FACTORY, context Factory); > if (connection Name != null) > env.put(Context.SECURITY_PRINCIPAL, connection Name); > if (connection Password != null) > env.put(Context.SECURITY_CREDENTIALS, connection Password); > if (connection URL != null) > env.put(Context.PROVIDER_URL, connection URL); > context = new InitialDirContext(env); > > try { > // Get listing of context > Naming Enumeration bindings = context.listBindings(""); > // Go through each item in list > while (bindings.hasMore()) { > Binding bd = (Binding)bindings.next(); > log(bd.getName() + ": " + bd.getClassName() + ": " + > bd.getObject()); > } > } catch (Naming Exception e) { > log("List Bindings failed: " + e); > } > > If I bind dn."", I got "HTTP Status 500 - Internal Server Error" message > when I access the secured page. > > I'm wondering if anyone knows the answers to any of the following > questions: > > 1. How to get a dn from uid when uid is not part of the dn? > 2. Does SHA digest been supported? When DAP server use SHA digest for > userPassword, how do I encrypt SHA digest? > 3. How to use an anonymous password for binding instead of using > connectionName/connectionPassword? > > Thanks > > Shelly > > -- > To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>