JAAS config for Active Directory LDAP
Hi all, thanks in advance for your help.
I spent many hours since the last month to set an authentication on Bonita via JAAS. I use a TOMCAT 6.0.37 and BONITA 6.2.0
you can see the jaas-standard.cfg I used
BonitaAuthentication-1 { com.sun.security.auth.module.LdapLoginModule sufficient userProvider="ldap://bdxemeadc01:389/OU=Standard User,OU=EMEA,DC=emea,DC=ad,DC=compagny,DC=com" userFilter="(&(samAccountName={USERNAME}) (objectClass=user))" authIdentity="{USERNAME}" debug=true useSSL=false; };
I tried several config I found anywhere on the net without success.
I have two questions : do you think that the space in the OU "Standard User" could be an issue ?
second question, in my AD the cn is user with the lastname and firstname CN= Bods, Paul DistinguishedName= CN=Bods\, Paul,OU=Standard User,OU=EMEA,DC=emea,DC=ad,DC=compagny,DC=com SamAccountName= pbods
do you have any idea about Userfilter and AuthIdenty value.
I read several documentation and forum or Ldaploginmodule info (http://docs.oracle.com/javase/7/docs/jre/api/security/jaas/spec/com/sun/...)
thanks in advance for any clue that can help
Hi,
I got Active Directory working with a configuration like bellow:
BonitaAuthentication-1 { com.sun.security.auth.module.LdapLoginModule REQUIRED userProvider="ldap://ad_url:ad_port/cn=users,dc=example,dc=com" authIdentity="{USERNAME}@example.com" userFilter="(&(|(samAccountName={USERNAME})(userPrincipalName={USERNAME})(cn={USERNAME}))(objectClass=user))" debug=true useSSL=false; };
Regards,
Comments
Hi Elias
What is your Bonita version ?
hi ,
i have the same problem .the active directory has "cn",
when i try to login i get : java.io.IOException
have you any idea ?
thank you
Can you share the full log file content? That should be helpful to identify why you get such exception. Also, about LDAP authentication configuration, official documentation page was recently updated and should provide all guidance in order to have a successful AD authentication setup. If you need more details about the JAAS configuration, please share information about your configuration as listed under " Before you start section ".
thank you for your response,
for information, i use bonita community 5.10.2 with tomcat
here is the log file :
/** /
oct. 15, 2014 2:14:25 PM org.apache.catalina.core.StandardWrapperValve invoke
Grave: "Servlet.service()" pour la servlet org.bonitasoft.console.security.server.CredentialsEncryptionServlet/security/credentialsencryption a généré une exception
java.lang.SecurityException: Erreur de configuration :
Ligne 8 : attendu [option key]
at com.sun.security.auth.login.ConfigFile.
From the following message
Ligne 8 : attendu [option key] - See more at: http://community.bonitasoft.com/answers/jaas-config-active-directory-ldap#node-13902
I assume that it's a JAAS configuration file issue. So in order to help I would need all details as listed on documentation page.
To continue the discussion I suggest you keep it on the other topic you opened: http://community.bonitasoft.com/answers/bonita-5102-community-ldap (especially as this one is about Bonita 6)
Also for long block of content like log files, I suggest you put it in a shared file on Google Drive or Dropbox in order to keep the thread easy to read.
Thanks
Comments
Hello,
Very good question. I'm waiting for a response on this problem since 3 months and nothing.... http://community.bonitasoft.com/groups/french-corner/est-ce-que-bonita-6...
http://community.bonitasoft.com/groups/installation-6x/bonita-6-really-r...