LDAP for web application user login - Weblogic

Ranch Hand

Posts: 35

posted 10 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

I want my user accounts to be stored in a LDAP (for e.g. OpenLDAP), and the users of my web application login based on this LDAP user accounts.
I know I can configure weblogic to manage this, anyone has any online tutorial article for this topic?

Thanks in advance.

Joe Ess

Bartender

Posts: 9626

I like...

posted 10 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

You can set up Weblogic to use an external LDAP (it uses a built-in one by default), but you can't manage it through Weblogic. I use Apache Directory Studio.
Once you have your LDAP set up, open the Weblogic console and create an Authenticator under Security Realms->myrealm->Providers. You'll need to provide the appropriate contact and mapping information for your configuration. That all depends on how you set up the database and for those details you'll have to rely on the provider's documentation.

[How To Ask Questions On JavaRanch]

pin guan wang

Ranch Hand

Posts: 35

posted 10 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

I have successfully got Apache Directory working with my Weblogic.
The users and groups from Apache Directory is showing in Weblogic Users & Groups section.

However, when I tried to login by using j_security_check, it always returns "Authentication Failed".
I have created some users and groups manually from weblogic, I can login with those users, but not those from Apache Directory.

I guess it could be caused by the password encryption in Apache Directory, when I set up a user, the password will be set to SSHA even I have selected plaintext.
If not my config files could be wrong.

Any idea?

login.xhtml

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
    <context-param>
        <param-name>javax.faces.PROJECT_STAGE</param-name>
        <param-value>Development</param-value>
    </context-param>

<servlet>
        <servlet-name>Faces Servlet</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
        
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>/faces/*</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>       
        <url-pattern>/MyWeb/*</url-pattern>        
    </servlet-mapping>
 
    
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>faces/index.xhtml</welcome-file> 
    </welcome-file-list>    
    
    <security-constraint>
        <display-name>AdminConstraint</display-name>
        <web-resource-collection>
            <web-resource-name>Admin</web-resource-name>
            <description/>
            <url-pattern>/secureAdmin/*</url-pattern>
        </web-resource-collection>
    </security-constraint>
    
    <security-constraint>
        <display-name>UserConstraint</display-name>
        <web-resource-collection>
            <web-resource-name>User</web-resource-name>
            <description/>
            <url-pattern>/secureUser/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <description/>
            <role-name>AdminRole</role-name>
            <role-name>UserRole</role-name>
        </auth-constraint>
    </security-constraint>
    
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>myrealm</realm-name>
        <form-login-config>
            <form-login-page>/login.xhtml</form-login-page>
            <form-error-page>/error.xhtml</form-error-page>
        </form-login-config>
    </login-config>
    
    <security-role>
        <description>Users added to this role have access to the secureAdmin directory of the server.</description>
        <role-name>AdminRole</role-name>
    </security-role>
    
    <security-role>
        <description>Users added to this role have access to the secureUser directory of the server.</description>
        <role-name>UserRole</role-name>
    </security-role>
           
</web-app>

weblogic.xml

<?xml version="1.0" encoding="UTF-8"?>
<weblogic-web-app xmlns="http://xmlns.oracle.com/weblogic/weblogic-web-app" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd http://xmlns.oracle.com/weblogic/weblogic-web-app http://xmlns.oracle.com/weblogic/weblogic-web-app/1.0/weblogic-web-app.xsd">
  <jsp-descriptor>
    <keepgenerated>true</keepgenerated>
    <debug>true</debug>
  </jsp-descriptor>
  <context-root>/MyWeb</context-root>
  <library-ref>
    <library-name>jsf</library-name>
    <specification-version>2.0</specification-version>
    <implementation-version>1.0.0.0_2-0-2</implementation-version>
  </library-ref>
    
  <security-role-assignment>
    <role-name>AdminRole</role-name>
    <principal-name>newgroup</principal-name>
  </security-role-assignment>
  
  <security-role-assignment>
    <role-name>UserRole</role-name>
    <principal-name>testGroup</principal-name>
  </security-role-assignment>
  
</weblogic-web-app>

pin guan wang

Ranch Hand

Posts: 35

posted 10 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi,

I have solved the problem.

I just need to "Reorder" my LDAP authenitcation provider in Weblogic (Security Realms -> myrealm -> Providers -> Authentication) to the top of the list and it works like a charm.

Thank you anyway.

Stop it! You're embarassing me! And you are embarrassing this tiny ad!

Smokeless wood heat with a rocket mass heater

https://woodheat.net