Re: [FIXED] jndi realm filter problem

[Xavier Renard <xa...@ulg.ac.be>]

Hi,

ok it's fixed i made another realm with a new mbean-descriptor bases on 
the JNDIRealm file
from version 4.1.31 and that do the trick till an update of tomcat.
However, for those runnin 4.1.30,the main difference between file is:
<  * @version $Revision: 1.19 $ $Date: 2004/08/26 21:37:21 $
---
 >  * @version $Revision: 1.16 $ $Date: 2003/12/12 21:31:56 $
1295c1343,1344
<         String filter = roleFormat.format(new String[] { 
doRFC2254Encoding(dn), username });
---
 >         String filter = roleFormat.format(new String[] { dn, username });
 >         filter = doRFC2254Encoding(filter);

so, instead of doing an new realm,just modifying this file and rebuild 
catalina.jar should do the trick
But i guess all this is nearly historical :-)

Thank for the excellent framework

Xavier

Xavier Renard wrote:

> Hi,
>
> I'm using the Debian package of tomcat (4.1.30) with ldap auth with 
> the following config:
>
> myapplication.xml
> ------------------------------
> <Context path="/myapplication" docBase="/path/2/build">
> <Realm   className="org.apache.catalina.realm.JNDIRealm" debug="99"
>     connectionURL="ldap://localhost:389"
>     connectionName="uid=tomcatproxy,dc=example,dc=org"
>     connectionPassword="tomcatpwd"
>     roleName="cn"
>     roleBase="ou=groups,dc=example,dc=org"
>     roleSearch="(memberUid={1})"
>     userBase="ou=people,dc=example,dc=org"
>     userSearch="(uid={0})"
>     userSubtree="true"/>
>  </Context>
>
> I have tried it with the tar.gz of tomcat-4.1.30 and tomcat-5.0.28 and 
> it works perfectly well.
> However,with the debian package, my filter (rolesearch) become 
> (?=undefined)
>
> sample from log
> --------------------------
> conn=7 op=5 SRCH base="ou=groups,dc=example,dc=org" scope=1 
> filter="(?=undefined)"
>
> I have to use the debian package so i can't really change that.
> However, before submitting a bug report or write a mail to the 
> debian-java mailing-list,
> i would like to know if someone could point me in the good direction 
> to fix this,ie
> where to modify this behaviour if possible or "override" this realm by 
> an other,...
>
> Regards
>
> Xavier



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org