ibm mobilefirst - worklight server authentication with Ldap -
i want authenticate users using apacheds ldap , integrate worklight server(liberty profile). modified server.xml following code after http endpoint element.
<ldapregistry id=”ldap” > realm=”ldapregistry” host=”localhost” port=”10389” ignorecase=”true” basedn=”dc=partition1,dc=com” binddn=”uid=admin,ou=system” userfilter=”(&(uid=%v)(objectclass=inetorgperson))” bindpassword=”secret” ldaptype="apacheds 2.0.0" </ldapregistry>
in authenticationconfig.xml
"<securitytests> <customsecuritytest name="ldapsecuritytest"> <test isinternaluserid="true" realm="ldaprealm"/> </customsecuritytest> <customsecuritytest name="ldapsecuritytestforwlconsole"> <test isinternaluserid="true" realm="worklightconsole"/> </customsecuritytest> </securitytests> <realms> <realm loginmodule="ldaploginmodule" name="ldaprealm"> <classname>com.worklight.usernamepasswordjsonauthenticator</classname> </realm> <realm loginmodule="strongdummy" name="sampleapprealm"> <classname>com.worklight.core.auth.ext.formbasedauthenticator</classname> </realm> <realm loginmodule="ldaploginmodule" name="worklightconsole"> <classname>com.worklight.core.auth.ext.formbasedauthenticator</classname> <onloginurl>/console</onloginurl> </realm> </realms> <loginmodules> <loginmodule name="ldaploginmodule"> <classname>com.worklight.ldaploginmodule</classname> <parameter name="ldaphost" value="ldap://localhost:10389"/> <parameter name="ldapdomain" value="localhost:10389"/> <parameter name="searchbase" value="dc=partition1,dc=com"/> <!-- in case credentials validated check user's memberof property string. can used check whether user belongs specific ldap unit or group. leave value empty skip check. --> </loginmodule> <loginmodule name="strongdummy"> <classname>com.worklight.core.auth.ext.nonvalidatingloginmodule</classname> </loginmodule> <loginmodule name="requirelogin"> <classname>com.worklight.core.auth.ext.singleidentityloginmodule</classname> </loginmodule> </loginmodules> </tns:loginconfiguration>
the worklight server console stops working. following ldap login module ibm site , support centre configuring liberty profile. kindly help
i noted ldap conf uses 2 different types of quotes - ” , ". reason? try changing of them ".
Comments
Post a Comment