Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

(I already asked this question on Stackoverflow, but didn't get much of an answer, so I decided I'd better ask the sysadmins, because it's more relevant here. The answer I got was that I also had to add loginProperty="uid" (not yet documented). Also roleSubtree, userSubree, debug seem not supported.)

For a Pilot project we've set up a Worklight server on a WAS using the Liberty profile. We're basing it on the configuration LDAP configuration of a Tomcat server (used for RTC) on the same machine, but they don't seem to map propertly to each other (in the sense that we can't just "copy-paste" the configuration. We've come to the point where logging into the LDAP server (An Active Directory server) works, but the login doesn't work and doesn't return any error message apart from a failed login in the logs. I am rather sure the binding to the LDAP server succeeds, since when changing the password in the configuration to any other value to the correct one, the log shows a problem regarding it.

Is it possible to take a look at these configurations and see what could be wrong?

The configurations are the following:

For the Tomcat server:

<Realm className="org.apache.catalina.realm.JNDIRealm" 
connectionName="OurCompanyName\JAZZ" connectionPassword="password" 
connectionURL="ldap://servername:389" debug="99" 
referrals="follow" 
roleBase="OU=Security Groups,OU=MyBusiness,DC=OurCompanyName,DC=local" 
roleName="cn" roleSearch="(member={0})" roleSubtree="true"  
userBase="OU=SBSUsers,OU=Users,OU=MyBusiness,DC=OurCompanyName,DC=local" 
userSearch="(sAMAccountName={0})" 
userSubtree="true">

For the WAS Liberty profile:

<ldapRegistry 
ldapType="Microsoft Active Directory"
bindDN="OurCompanyName\JAZZ"
bindPassword="password" 
baseDN="OU=Security Groups,OU=MyBusiness,DC=OurCompanyName,DC=local"
host="servername" 
id="ActiveDirectoryLDAP"
port="389" 
ignoreCase="true" 
userFilter="&amp;(sAMAccountname={0})"
groupFilter="&amp;(member={0})"     
referal="follow"
roleSubtree="true"
userSubtree="true"
userIdMap="*:uid"
groupIdMap="*:cn"
debug="99"> 
</ldapRegistry>

Thanks,

Kristof

share|improve this question
    
The Worklight team does not monitor ServerFault; you should continue this in StackOverflow. –  Idan Adar Sep 26 at 6:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.