Worked like a charm. However I don't seem to be able to add multiple
role-name's to my web.xml (application).
Isn't it as simple as this?
web.xml
within security constraint:
<auth-constraint>
<!-- NOTE: This role is not present in the default users file -->
<role-name>CN=AD Group,OU=BLAh,DC=blah</role-name>
<role-name>CN=AD user account,OU=Blah,DC=blah</role-name>
</auth-constraint>
and
within security-role:
<role-name>CN=AD Group,OU=BLAh,DC=blah</role-name>
<role-name>CN=AD user account,OU=Blah,DC=blah</role-name>
The first AD group works, but the second line, "user account" doesn't have
access....??
My CombinedRealms are:
<Realm className="org.apache.catalina.realm.CombinedRealm" >
<Realm className="org.apache.catalina.realm.JNDIRealm"
DEBUG="99"
connectionName="CN=svc,OU=blah,OU=blah,blah"
connectionPassword="*********"
connectionURL="ldap://dc:port";
referrals="follow"
roleBase="OU=where AD Group is located,OU=blah,DC=blah"
roleName="distinguishedName"
roleSearch="member={0}"
roleSubtree="false"
userBase="DC=blah"
userSearch="sAMAccountName={0}"
userSubtree="true"
/>
<Realm className="org.apache.catalina.realm.JNDIRealm"
DEBUG="99"
connectionName="CN=svc,OU=blah,DC=blah"
connectionPassword="**************"
connectionURL="ldap://dc:port";
referrals="follow"
roleBase="OU=AD group where user account is
located,OU=blah,DC=blah"
roleName="distinguishedName"
roleSearch="member={0}"
roleSubtree="false"
userBase="DC=blah"
userSearch="sAMAccountName={0}"
userSubtree="true"
/>
</Realm>
Thanks for all your help guys.
Konstantin Kolinko wrote:
>
> Use the latest version.
> CombinedRealm was added in 6.0.20. (or in 6.0.19, but that version was
> never released)
> http://tomcat.apache.org/tomcat-6.0-doc/changelog.html
>
> Best regards,
> Konstantin Kolinko
>
>
--
View this message in context:
http://old.nabble.com/java.lang.ClassNotFoundException%3A-org.apache.catalina.realm.CombinedRealm-tp26402852p26421510.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
