I'm using Shiro 1.1.0. I have problems using the ActiveDirectoryRealm.

I manage to get authentication to work if I specify a user's FQDN as
follows:

CN=Smith John,OU=...,OU=...,DC=...,DC=...

However, the user name to be authenticated should be the sAMAccountName
attribute. This is what the user normally enters as his/her user name when
logging in. E g in our organization the sAMAccountName for the above user
would be josmith.

How can I instruct Shiro to match the sAMAccountName attribute and not the
FQDN? This must be a very common request since the login process in Windows
(using active directory) always uses the sAMAccountName (as far as I know
anyway).

Any help is appreciated,

/Bengt

Reply via email to