Re: [FIXED] jndi realm filter problem

[Xavier Renard]

Hi,
ok it's fixed i made another realm with a new mbean-descriptor bases on 
the JNDIRealm file
from version 4.1.31 and that do the trick till an update of tomcat.
However, for those runnin 4.1.30,the main difference between file is:
<  * @version $Revision: 1.19 $ $Date: 2004/08/26 21:37:21 $
---
>  * @version $Revision: 1.16 $ $Date: 2003/12/12 21:31:56 $
1295c1343,1344
<         String filter = roleFormat.format(new String[] { 
doRFC2254Encoding(dn), username });
---
>         String filter = roleFormat.format(new String[] { dn, username });
>         filter = doRFC2254Encoding(filter);

so, instead of doing an new realm,just modifying this file and rebuild 
catalina.jar should do the trick
But i guess all this is nearly historical :-)

Thank for the excellent framework
Xavier
Xavier Renard wrote:
Hi,
I'm using the Debian package of tomcat (4.1.30) with ldap auth with 
the following config:

myapplication.xml
------------------------------
<Context path="/myapplication" docBase="/path/2/build">
<Realm   className="org.apache.catalina.realm.JNDIRealm" debug="99"
    connectionURL="ldap://localhost:389";
    connectionName="uid=tomcatproxy,dc=example,dc=org"
    connectionPassword="tomcatpwd"
    roleName="cn"
    roleBase="ou=groups,dc=example,dc=org"
    roleSearch="(memberUid={1})"
    userBase="ou=people,dc=example,dc=org"
    userSearch="(uid={0})"
    userSubtree="true"/>
 </Context>
I have tried it with the tar.gz of tomcat-4.1.30 and tomcat-5.0.28 and 
it works perfectly well.
However,with the debian package, my filter (rolesearch) become 
(?=undefined)

sample from log
--------------------------
conn=7 op=5 SRCH base="ou=groups,dc=example,dc=org" scope=1 
filter="(?=undefined)"

I have to use the debian package so i can't really change that.
However, before submitting a bug report or write a mail to the 
debian-java mailing-list,
i would like to know if someone could point me in the good direction 
to fix this,ie
where to modify this behaviour if possible or "override" this realm by 
an other,...

Regards
Xavier

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]