Re: [CI] Re: Active Directory Integration?

[James CE Johnson <jc...@tragus.org>]

Hi Emmanuel,

Yes, I tried that before I posted but I'm apparently doing something wrong.

Can you tell me more about the guest user requirement? Should this be an
account without a password?

Is it going to bind as "ldap.config.bind.dn" when trying to search for the
guest?

Is there a way to increase the logging of the lcap components? I've
modified "./apps/continuum/WEB-INF/classes/log4j.xml" but with no luck:

  <logger name="org.codehaus.plexus.redback">
    <level value="trace"/>
  </logger>

  <logger name="ldapController">
    <level value="trace"/>
  </logger>

Right now, I'm not sure exactly where things are failing. The only thing
useful I see in continuum.log is repeated searches for my guest:

2009-02-18 13:20:02,368 [btpool0-2] INFO  ldapController  - Searching for
user: MYGUEST
2009-02-18 13:20:02,369 [btpool0-2] INFO  ldapController  - Searching for
users with filter: '(&(objectClass=user)(sAMAccountName=MYGUEST))' from
base dn: DC=foo,DC=mycompany,DC=com

And one search for my admin user:

2009-02-18 13:19:47,907 [btpool0-2] INFO 
interceptor#redbackForceAdminUserInterceptor  - Admin user found. No need
to configure admin user.
2009-02-18 13:19:48,064 [btpool0-2] INFO  ldapController  - Searching for
user: admin
2009-02-18 13:19:48,064 [btpool0-2] INFO  ldapController  - Searching for
users with filter: '(&(objectClass=user)(sAMAccountName=admin))' from base
dn: DC=foo,DC=mycompany,DC=com

I'm curious why it is search for "admin" when conf/security.properties
maps the admin user:
    redback.default.admin=MYADMIN

Could it be because I had it working in the default mode before trying to
configure ldap?

Thanks,
James

> Try to follow this page:
> http://continuum.apache.org/docs/1.2.3/administrator_guides/security/ldap.html
>
> Emmanuel
>