Hi,
I could achieve authentication using LDAP successfully, but not able to
authorize the request
here is my http consumer:
<http:endpoint service="test:servicehttp"
endpoint="consumerhttp"
role="consumer"
locationURI="http://localhost:8889"
defaultMep="http://www.w3.org/2004/08/wsdl/in-out"
soap="true"
targetService="test:MyS1PojoService"
targetEndpoint="myS1PojoSu"
authMethod="BASIC">
Here is my login.properties
servicemix-domain {
sample.module.LdapLoginModule REQUIRED
userProvider="ldap://ip:port/ou=Users,dc=site"
userFilter="(&(uid={USERNAME})(objectClass=inetOrgPerson))"
useSSL=false
debug=true;};
This works for authentication but not for authorization. How can I achieve
authorization.
What role groups.properties plays in authorization?
I tried this in groups.properties
myrole=esbtest
I tried this in security.xml
<sm:authorizationEntries>
<sm:authorizationEntry service="test:MyS1PojoService" roles="myrole"
/>
</sm:authorizationEntries>
Still the request is never authorized. I did even get any error
This is what I got at the log
DEBUG - ConsumerProcessor - Receiving HTTP request: GET /
HTTP/1.1
Host: localhost:8889
User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1)
Gecko/20061023 SUSE/2.0-30 Firefox/2.0
Accept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Authorization: Basic ZXNidGVzdDplc2I=
DEBUG - HttpComponent - Retrieving proxied endpoint
definition
DEBUG - BeanComponent - Querying service description for
ServiceEndpoint[service={http://www.in2n.com/test}MyS1PojoService,endpoint=myS1PojoSu]
DEBUG - BeanComponent - No description found for
{http://www.in2n.com/test}MyS1PojoService:myS1PojoSu
How to achieve authorization?
thanks,
Pratibha
--
View this message in context:
http://www.nabble.com/How-to-achieve-Authorization-using-LDAP--tp17186833p17186833.html
Sent from the ServiceMix - User mailing list archive at Nabble.com.