Am Mittwoch, den 08.10.2008, 12:04 -0500 schrieb Caldarale, Charles R:
> > From: Felix Schumacher [mailto:[EMAIL PROTECTED]
> > Subject: Re: JNDIRealm - mapping LDAP group to security role
> >
> > have you thought about adding an extra attribute to the
> > groups, so that the mapping is done by a normal ldap query?
> 
> Even that's not necessary.  The servlet security model already has a built-in 
> mapping capability (<security-role-ref>) that can be used to convert LDAP or 
> other database values to the roles declared in the web.xml file.
Great to know, but you would have to change the files, if group mapping
changed. If you have groups or roles reachable by LDAP, you could just
use them.

Felix
> 
>  - Chuck
> 
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
> MATERIAL and is thus for use only by the intended recipient. If you received 
> this in error, please contact the sender and delete the e-mail and its 
> attachments from all computers.
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to