Using LDAP roles for EJB security 2004-12-27 - By Ranjeeth kumar
Back
All-
Below is the scenario
Application Server : Weblogic 8.1
Webserver: Iplanet
Security: Siteminder (SSO) with LDAP
All users information with their designated roles in the business is
available in ldap(got user group like
supplier,vendor,customer,contractors etc). Siteminder authentication
always done against ldap.
Now I am designing couple of ejb's where I need to provide method
level security based on the user roles. I know that is possible by
defining these roles & users in Weblogic and control it through the
ejb xml files.
But my main issue is that in the above case, I need to duplicate the
entries in weblogc which is really next to impossible and every time
user's added in ldap, I need to update webllogic which is a
maintanance head-ache.
What I really looking is somehow I can map the EJB required roles to
LDAP roles in a better way.
Ur suggestions are really valuable
*****************************
Ranjeeth kumar,
*************************************
====================================================================
Companion Site: http://www.corej2eepatterns.com
J2EE BluePrints: http://java.sun.com/blueprints/corej2eepatterns
List Archive: http://archives.java.sun.com/archives/j2eepatterns-interest.html
Unsubscribing: email "signoff J2EEPATTERNS-INTEREST" to listserv@(protected)
|
|
