You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by "Buntin, Seth - KATE" <Se...@coe.murraystate.edu> on 2006/01/27 16:05:00 UTC
LDAP Authentication
First off, let me say that I am fairly new to Struts. I am pretty
efficient with Coldfusion and thought I would expand my horizons with
JSP and Struts.
Now that being said I have a question. I work for a University and most
of the applications I write for the web have LDAP authentication with
our domain controller. I can't seem to find much information about how
to do this or where to start. In Coldfusion it was pretty simple. How
simple is it to implement this in Struts? Where should I look for
information? Can some one point me in the right direction?
Thanks,
Seth Buntin
Re: LDAP Authentication
Posted by Marcelo Morales <ma...@redcetus.com>.
Helo
On Jan 27, 2006, at 11:05 AM, Buntin, Seth - KATE wrote:
> First off, let me say that I am fairly new to Struts. I am pretty
> efficient with Coldfusion and thought I would expand my horizons with
> JSP and Struts.
>
welcome
>
> Now that being said I have a question. I work for a University and
> most
> of the applications I write for the web have LDAP authentication with
> our domain controller. I can't seem to find much information about
> how
> to do this or where to start. In Coldfusion it was pretty simple.
> How
> simple is it to implement this in Struts? Where should I look for
> information? Can some one point me in the right direction?
>
That is outside the struts' scope. It is an application server /
servlet container / authentication issue.
Read tomcat (or your application server) documentation and the
servlet specification. AFAIK struts supports container-manager
authorization (role attribute of action element), and nothing else in
the security area.
>
> Thanks,
>
>
>
> Seth Buntin
>
Regards
Marcelo Morales
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: LDAP Authentication
Posted by Torgeir Veimo <to...@pobox.com>.
On Fri, 2006-01-27 at 09:05 -0600, Buntin, Seth - KATE wrote:
> t off, let me say that I am fairly new to Struts. I am pretty
> efficient with Coldfusion and thought I would expand my horizons with
> JSP and Struts.
>
>
>
> Now that being said I have a question. I work for a University and
> most
> of the applications I write for the web have LDAP authentication with
> our domain controller. I can't seem to find much information about
> how
> to do this or where to start.
You can either do container managed authentication and authorisation
(container == servlet engine), or implement it in your application.
A middle ground is to use a servlet filter managing it for you. You can
take a look at securityfilter.sf.net. In addition to the framework, you
need some clue code that connects to your ldap server, which would be
trivial to implement in a single class using JNDI. Or you may google for
"JNDI realm" to see some existing code.
Most security implementation uses url patterns to match requests to the
appropriate security constraints, I guess this is what you're familiar
with from coldfusion as well?
--
Torgeir Veimo <to...@pobox.com>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org