I try to run the LDAP module to see if it works (eval).

[b][u]I configured the AD Server like this (ad.properties):[/u][/b]

java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
java.naming.security.principal=CN=LDAP_USER_ID,OU=Coworker,DC=office,dc=test,dc=com

java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory

# LDAP url
java.naming.provider.url=ldap://testad.com

adminUserDN = CN=myaccount,OU=Coworker,DC=office,dc=test,dc=com
ssoSlave = false

# admin user password
adminUserPassword = XXX

java.naming.security.authentication=simple

initialSearchAttributes=OU=Coworker,DC=office,dc=test,dc=com
Organization=o
OrganizationUnit=ou
CommonName=cn
Surname=sn
GivenName=givenname
uid=sAMAccountName
dn=dn
mail=mail
Password=pass
Language=language

groupResolverClass=info.magnolia.jaas.sp.ldap.resolver.ADGroupResolver
GroupId=memberOf

[u][b]jaas.config:[/b][/u]

magnolia {
   info.magnolia.jaas.sp.jcr.JCRAuthenticationModule optional;
   info.magnolia.jaas.sp.ldap.ADAuthenticationModule requisite 
skip_on_previous_success=true;
   info.magnolia.jaas.sp.jcr.JCRAuthorizationModule required;
};

[b][u]test it with: java -jar magnolia-ldap-tester-1.4.4.jar 
info.magnolia.jaas.sp.ldap.ADAuthenticationModule ad.properties myaccount 
pwd[/u][/b]

2012-07-07 21:42:18,394 DEBUG i.m.j.s.l.Tester$MockSecuritySupport - Mocking 
group Administrators
2012-07-07 21:42:18,394 DEBUG i.m.j.s.l.Tester$MockSecuritySupport - Mocking 
group Administrators

looks good ... ;-)

Also created the security conf (under Configuration security for LDAP 1.4) in 
Magnolia

And created group and role "Administrators" ...

I always get (what's wrong?):

java.lang.IllegalArgumentException: When logging in the Subject must have a 
info.magnolia.cms.security.User principal.
        at info.magnolia.context.UserContextImpl.login(UserContextImpl.java:109)
        at info.magnolia.context.MgnlContext.login(MgnlContext.java:115)
        at 
info.magnolia.cms.security.auth.login.LoginFilter.doFilter(LoginFilter.java:82)
        at 
info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:91)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:83)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:85)
        at 
info.magnolia.cms.filters.CosMultipartRequestFilter.doFilter(CosMultipartRequestFilter.java:87)
        at 
info.magnolia.cms.filters.OncePerRequestAbstractMgnlFilter.doFilter(OncePerRequestAbstractMgnlFilter.java:61)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:83)
        at 
info.magnolia.module.devicedetection.filter.DeviceDetectionFilter.doFilter(DeviceDetectionFilter.java:73)
        at 
info.magnolia.cms.filters.OncePerRequestAbstractMgnlFilter.doFilter(OncePerRequestAbstractMgnlFilter.java:61)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:83)
        at 
info.magnolia.cms.filters.ContentTypeFilter.doFilter(ContentTypeFilter.java:102)
        at 
info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:91)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:83)
        at 
info.magnolia.cms.filters.ContextFilter.doFilter(ContextFilter.java:131)
        at 
info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:91)
        at 
info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:83)
        at 
info.magnolia.cms.filters.CompositeFilter.doFilter(CompositeFilter.java:67)
        at 
info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:91)
        at 
info.magnolia.cms.filters.SafeDestroyMgnlFilterWrapper.doFilter(SafeDestroyMgnlFilterWrapper.java:108)
        at 
info.magnolia.cms.filters.MgnlFilterDispatcher.doDispatch(MgnlFilterDispatcher.java:67)
        at 
info.magnolia.cms.filters.MgnlMainFilter.doFilter(MgnlMainFilter.java:108)
        at 
info.magnolia.cms.filters.MgnlMainFilter.doFilter(MgnlMainFilter.java:94)


With AD and LDAP config ... ;-( (it's an AD Server)

Thanx for your help!

-- 
Context is everything: 
http://forum.magnolia-cms.com/forum/thread.html?threadId=aea550ee-6ce1-45ae-8bfa-4a843f41e7e6


----------------------------------------------------------------
For list details, see http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to