You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Dmitry Beransky <db...@ucsd.edu> on 2001/12/08 04:05:39 UTC

problems configuring JNDIRealm

Hi,

I'm trying to configure use the JNDIRealm for authentication with Tomcat 
4.0.  I've added the JNDI realm to the local host server of the Calalina 
engine in server.xml file, as per the HOW-TO:

     <Engine name="Catalina" defaultHost="localhost" debug="0">
       <Host name="localhost" debug="0" appBase="webapps" unpackWARs="false"
        configPath="slide" className="wrappers.catalina.SlideHost">
         <Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
                connectionName="cn=Manager,dc=prod,dc=domain,dc=com"
                connectionPassword="****************"
                connectionURL="ldap://prod.domain.com:389"
                roleBase="dc=roles,dc=roles,dc=prod,dc=domain,dc=com"
                roleName="cn"
                roleSearch="(uniqueMember={0})"
                roleSubtree="true"
                userPassword="userPassword"
                userPattern="cn={0},dc=users,dc=prod,dc=domain,dc=com"
                digest="SHA"
          />
         .....

When Tomcat first starts I can see it binding to the LDAP server.  However, 
when I try to log in to a resource with a browser (I get a login screen, as 
expected), I don't see any activity on the LDAP side.  I've tried debugging 
the JNDIRealm.java code and surely enough, there is a call to start() and 
open(), but authenticate() never gets called.  To the best of my knowledge 
there aren't any error messages anywhere in the logs.  Any ideas what I 
might be missing, what to look for? Anything else I can do to debug this 
problem?

Thanks
Dmitry 


--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>

Re: problems configuring JNDIRealm

Posted by Dmitry Beransky <db...@ucsd.edu>.
On Sat, 8 Dec 2001, Craig R. McClanahan wrote:

> There will not be any LDAP activity until you actually *submit* the
login
> screen.  

That's what I meant.  I'm sorry, I should've been more explicit.  I do    
submit the credentials and get another 401 back.  Meanwhile, there is no
activity on the LDAP side.

Thanks
Dmitry



--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>

Re: problems configuring JNDIRealm

Posted by "Craig R. McClanahan" <cr...@apache.org>.
There will not be any LDAP activity until you actually *submit* the login
screen.  That's when JNDIRealm is called to check the submitted username
and password.  The logic that decides you need to be authenticated, and
then displays the login page, is in the Authenticator, not the Realm.

Craig


On Fri, 7 Dec 2001, Dmitry Beransky wrote:

> Date: Fri, 07 Dec 2001 19:05:39 -0800
> From: Dmitry Beransky <db...@ucsd.edu>
> Reply-To: Tomcat Users List <to...@jakarta.apache.org>
> To: tomcat-user@jakarta.apache.org
> Subject: problems configuring JNDIRealm
>
>
> Hi,
>
> I'm trying to configure use the JNDIRealm for authentication with Tomcat
> 4.0.  I've added the JNDI realm to the local host server of the Calalina
> engine in server.xml file, as per the HOW-TO:
>
>      <Engine name="Catalina" defaultHost="localhost" debug="0">
>        <Host name="localhost" debug="0" appBase="webapps" unpackWARs="false"
>         configPath="slide" className="wrappers.catalina.SlideHost">
>          <Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
>                 connectionName="cn=Manager,dc=prod,dc=domain,dc=com"
>                 connectionPassword="****************"
>                 connectionURL="ldap://prod.domain.com:389"
>                 roleBase="dc=roles,dc=roles,dc=prod,dc=domain,dc=com"
>                 roleName="cn"
>                 roleSearch="(uniqueMember={0})"
>                 roleSubtree="true"
>                 userPassword="userPassword"
>                 userPattern="cn={0},dc=users,dc=prod,dc=domain,dc=com"
>                 digest="SHA"
>           />
>          .....
>
> When Tomcat first starts I can see it binding to the LDAP server.  However,
> when I try to log in to a resource with a browser (I get a login screen, as
> expected), I don't see any activity on the LDAP side.  I've tried debugging
> the JNDIRealm.java code and surely enough, there is a call to start() and
> open(), but authenticate() never gets called.  To the best of my knowledge
> there aren't any error messages anywhere in the logs.  Any ideas what I
> might be missing, what to look for? Anything else I can do to debug this
> problem?
>
> Thanks
> Dmitry
>
>
> --
> To unsubscribe:   <ma...@jakarta.apache.org>
> For additional commands: <ma...@jakarta.apache.org>
> Troubles with the list: <ma...@jakarta.apache.org>
>
>


--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>