Hello Friends: 
I am trying to use Active Directory Realm in my web application 
I have to authenticate users against 2 Active Directory 
Need help with configuration? 

Questions: 
1. First when the form is submitted, request does not reach LoginUser
servlet? (Unable to figure out whats wrong with .ini) 
After disabling filter, request reaches Servlet, but realms are not
available.:( 
2. How do I know which realm is used by LoginUser servlet? 
3. Where do I specifiy so that these realms are available to
SecurityManager/DefaultWebSecurityManager? 
4. I tried the example here 
http://www.ibm.com/developerworks/web/library/wa-apacheshiro/
It works well but with only 1 realm 


Below is my shiro.ini, login.jsp, web.xml, login servlets doPost Method 
[main] 
sirRealm = org.apache.shiro.realm.activedirectory.ActiveDirectoryRealm 
sirRealm.systemUsername = xxxx 
sirRealm.systemPassword = xxx 
sirRealm.searchBase = OU=IT,OU=MA-Users,DC=cinfotec,DC=corp 
sirRealm.url = ldap://ad0.cinfotec.corp:389/ 

xmrRealm = org.apache.shiro.realm.activedirectory.ActiveDirectoryRealm 
xmrRealm.systemUsername = xxxx 
xmrRealm.systemPassword = xxx 
xmrRealm.searchBase = OU=BU,OU=MA-Users,DC=cinfotec,DC=corp 
xmrRealm.url = ldap://ad1.cinfotec.corp:389/ 

authc.loginUrl = /login.jsp 
[urls] 
# make sure the end-user is authenticated.  If not, redirect to the
'authc.loginUrl' above, 
# and after successful authentication, redirect them back to the original
account page they 
# were trying to view: 
/** = authc 
--------------------------------------------------------------- 
login.jsp 
<form name="loginform" method="post" action='LoginUser'> 
    <table align="left" border="0" cellspacing="0" cellpadding="3"> 
        <tr> 
            <td>Username:</td> 
            <td><input type="text" name="username" maxlength="30"></td> 
        </tr> 
        <tr> 
            <td>Password:</td> 
            <td><input type="password" name="password" maxlength="30"></td> 
        </tr> 
        <tr> 
            <td colspan="2" align="left"><input type="checkbox"
name="rememberMe">Remember Me</td> 
        </tr> 
        <tr> 
            <td colspan="2" align="right"><input type="submit" name="submit"
value="Login"></td> 
        </tr> 
    </table> 
</form> 
--------------------------------------------------------------- 
web.xml 
    <filter> 
        <filter-name>ShiroFilter</filter-name> 
       
<filter-class>org.apache.shiro.web.servlet.IniShiroFilter</filter-class> 
    </filter> 
    <filter-mapping> 
        <filter-name>ShiroFilter</filter-name> 
        <url-pattern>/*</url-pattern> 
    </filter-mapping> 

    <servlet> 
        <servlet-name>LoginUser</servlet-name> 
        <display-name>LoginUser</display-name> 
        <description>Servlet to autenticate User agains AD</description> 
        <servlet-class>com.siriusxm.security.Login</servlet-class> 
    </servlet> 
    <servlet-mapping> 
        <servlet-name>LoginUser</servlet-name> 
        <url-pattern>/LoginUser</url-pattern> 
    </servlet-mapping> 

--------------------------------------------------------------- 
LoginUser Servlet doPost 

    public void doPost(HttpServletRequest request, HttpServletResponse
response) throws ServletException, IOException { 
        String url = "/login.jsp"; // Get the login page url fromm
properties file 
        String username = request.getParameter("username"); 
        String password = request.getParameter("password"); 
        UsernamePasswordToken token = 
                new UsernamePasswordToken(username, password); 

        try { 
        Subject subject = SecurityUtils.getSubject(); 
        subject.login(token); 
        //token.clear(); 
        url = "/secure/index.jsp"; 

        } catch (AuthenticationException e) { 
            logger.error("Error:" + e.getMessage()); 
            e.printStackTrace(); 
        } 
        RequestDispatcher dispatcher = 
             getServletContext().getRequestDispatcher(url); 
        
        dispatcher.forward(request, response);   

        }
-- 
View this message in context: 
http://shiro-user.582556.n2.nabble.com/Help-with-configuring-mulitple-ActiveDirectory-in-web-app-tp6035984p6035984.html
Sent from the Shiro User mailing list archive at Nabble.com.

Reply via email to