JAAS + Active Directory 2003-12-28 - By Finn, Michael
Back Not sure if this helps, or is applicable to your env/appsvr, but:
We authenticate and authorize vs AD using the exposed LDAP port in AD. A bind to the tree to authenticate, and a query to the tree to get author. info.
We did have to write a login module to do this, but a sufficiently configurable vendor-provided LDAP login module (which we did not have) could work.
Mike
-- --Original Message-- -- From: Hart, Justin [mailto:JHart@(protected)] Sent: Monday, December 22, 2003 8:04 PM To: J2EE-INTEREST@(protected) Subject: JAAS + Active Directory
How can I use JAAS + Active Directory on a windows machine without enabling DES on the Active Directory or spending an arm and a leg on 3rd party LoginModule?
Justin
=========================================================================== To unsubscribe, send email to listserv@(protected) and include in the body of the message "signoff J2EE-INTEREST". For general help, send email to listserv@(protected) and include in the body of the message "help".
=========================================================================== To unsubscribe, send email to listserv@(protected) and include in the body of the message "signoff J2EE-INTEREST". For general help, send email to listserv@(protected) and include in the body of the message "help".
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859 (See http://iso-8859.ora-code.com)-1"> <META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35"> <TITLE>RE: JAAS + Active Directory</TITLE> </HEAD> <BODY>
<P><FONT SIZE=2>Not sure if this helps, or is applicable to your env/appsvr, but:</FONT> </P>
<P><FONT SIZE=2>We authenticate and authorize vs AD using the exposed LDAP port in AD. A bind to the tree to authenticate, and a query to the tree to get author. info.</FONT></P>
<P><FONT SIZE=2>We did have to write a login module to do this, but a sufficiently configurable vendor-provided LDAP login module (which we did not have) could work.</FONT></P>
<P><FONT SIZE=2>Mike</FONT> </P>
<P><FONT SIZE=2>-- --Original Message-- --</FONT> <BR><FONT SIZE=2>From: Hart, Justin [<A HREF="mailto:JHart@(protected)">mailto :JHart@(protected)</A>]</FONT> <BR><FONT SIZE=2>Sent: Monday, December 22, 2003 8:04 PM</FONT> <BR><FONT SIZE=2>To: J2EE-INTEREST@(protected)</FONT> <BR><FONT SIZE=2>Subject: JAAS + Active Directory</FONT> </P> <BR>
<P><FONT SIZE=2>How can I use JAAS + Active Directory on a windows machine without enabling DES on the Active Directory or spending an arm and a leg on 3rd party LoginModule?</FONT></P>
<P><FONT SIZE=2>Justin</FONT> </P>
<P><FONT SIZE=2>=============================================================== ============</FONT> <BR><FONT SIZE=2>To unsubscribe, send email to listserv@(protected) and include in the body</FONT> <BR><FONT SIZE=2>of the message "signoff J2EE-INTEREST". For general help, send email to</FONT> <BR><FONT SIZE=2>listserv@(protected) and include in the body of the message "help".</FONT> </P>
</BODY> </HTML> =========================================================================== To unsubscribe, send email to listserv@(protected) and include in the body of the message "signoff J2EE-INTEREST". For general help, send email to listserv@(protected) and include in the body of the message "help". <p>
|
|