Active Directory (LDAP) authentication [SF Bug 1677143]

[kohlhaas]

Active Directory (LDAP) authentication Private: (?)
No

I tried to configure rapla with Active Directory (windows 2003):

<plugin connectionPassword="ad123" userSearch="(sAMAccountName={0})"
enabled="true" class="org.rapla.plugin.jndi.JNDIPlugin"
userCn="sAMAccountName" contextFactory="com.sun.jndi.ldap.LdapCtxFactory"
userMail="userPrincipalName" connectionURL="ldap://192.168.36.35:389"
connectionName="CN=PortalAccountResolver,CN=Users,DC=mydomain,DC=com"
userBase="CN=Users,DC=mydomain,DC=com"/>

This is the best setup I managed to create, because it recognizes the
password
but:

when the Active directory password is correct I get a popup :

"Object for id [org.rapla.entities.User_2] not found"

on next try: User_3, User_4 and so on. When incorrent a popup with:

"Login failed"

I tried rapla 1.3 and latest CVS 1.3.1 version with tomcat 5.5.

Any advice? Is it a bug in config or in Rapla?

[kohlhaas]

We've found the same problem. The question is that when a user is
authenticated using LDAP the user is not created in the local database.
I've include a not very elegant path in the Server Service Impl that creates
the entry in the local database after a successful login.

[kohlhaas]

Its a bug in rapla. You may avoid by creating the user manually, but I
havent tried because I have no access to a running ldap server in the
moment. Fix planned for next version

[Mikael Kermorgant <mikael.kermorgant@…>]

The fact that authentification fails if the user doesn't exist in rapla's local database could also be an easy way to restrict who can access the rapla gui.

Only user created in rapla by the administrator could login, authentication being done by the ldap server.

If user is automatically created in rapla's database, this restriction would have to enforced by another way (could be an ldap filter or a group membership in the ldap directory).

[kohlhaas]

(In [1331]) closes #3

[Elpqibpy]

comment1,

[Fpubjuuh]

comment4,

[Jnvskbwr]

comment2,

[SmithJ]

dQctBm Lol lol lool lol ha-ha! Lol lol lol?