dinsdag 29 mei 2012

Implementing the OpenLDAP Authenticator


In an older blog post I explained the steps you'll have to execute to implement the SQL Authenticator.
In this article, I will explain you how to implement an OpenLDAP authenticator.
You can download the sources here.
Architecture of my setup:
* First Oracle Linux 5 server machine with the Open LDAP setup:
suffix          "dc=mycompany,dc=com"
rootdn        "cn=manager,dc=mycompany,dc=com"
rootpw       <<Your_Encrypted_Password>>
* Second Oracle Linux 5 server machine with WebLogic Server 11g with a basic domain.

(1)
To populate the LDAP tree, you can use the attached ldif file (fill_openldap_full.ldif):
ldapadd -f fill_openldap_full.ldif -xv -D "cn=manager,dc=mycompany,dc=com" -w <<Your_Password>>
Result of this operation:
* 4 users (organizational unit = people): bill, harry, kelly and stuart.
* 2 groups (organizational unit = groups): java_dev (with members kelly and stuart) and wls_admin (with members bill, harry and stuart)





(2)
Create the OpenLDAP Authenticator.




(3)
Fill in the "Provider Specific" tab page with the following data:
Host                                                             myOpenLDAPServer
Port                                                              389
Principal                                                       cn=manager,dc=mycompany,dc=com
User Base DN                                              ou=people,dc=mycompany,dc=com
User From Name Filter                                 (&(cn=%u)(objectclass=person))
User Name Attribute                                     cn
User Object Class                                         person
Group Base DN                                            ou=groups,dc=mycompany,dc=com
Group From Name Filter                               (&(cn=%g)(objectclass=groupofnames))
Static Group Name Attribute                         cn
Static Group Object Class                             groupofnames
Static Member DN Attribute                         member
Static Group DNs from Member DN Filter    (&(member=%M)(objectclass=groupofnames))


(4)
Set the Control Flag for the default authenticator to OPTIONAL.




(5)
Restart the servers within your domain and verify afterwards if you see the OpenLDAP users and groups in the console.





(6)
Deploy the file openldap_scrty.war into your WLS domain and verify that only the users who belong to the group wls_admin can successfully access the application.

28 opmerkingen:

  1. Hi this is abinaya I find it interesting that for environments

    running multiple service domains you do not include some

    recommendations for guest console service.

    Let me explain; only the control domain can (as for other LDom

    configuration actions) change the console definition for a guest

    domain. It is possible to configure the (second) service domain

    to run a VCC service and therefore serve the console sessions

    for all the guests from that service domain.Oracle Training in Chennai

    website where someone please help me to identity the syllabus

    covers everything or not??

    Thanks, abinaya

    BeantwoordenVerwijderen
  2. Hi this is abinaya I find it interesting that for environments

    running multiple service domains you do not include some

    recommendations for guest console service.

    Let me explain; only the control domain can (as for other LDom

    configuration actions) change the console definition for a guest

    domain. It is possible to configure the (second) service domain

    to run a VCC service and therefore serve the console sessions

    for all the guests from that service domain. oracle training

    chennai
    website where someone please help me to identity

    the syllabus covers everything or not??

    Thanks, abinaya

    BeantwoordenVerwijderen
  3. Oracle Training

    The information you posted here is useful to make my career better keep updates..If anyone want to become an oracle certified professional reach FITA Oracle Training Center in Chennai, which offers Best Oracle Course in Chennai with years of experienced professionals.

    BeantwoordenVerwijderen
  4. Oracle Training Center in Chennai

    I get a lot of great information from this blog. Recently I did oracle certification course at a leading academy. If anyone interested to learn best Oracle Course in Chennai visit FITA academy which offer SQL Training in Chennai.



    BeantwoordenVerwijderen
  5. Big Data Training Chennai

    I get a lot of great information from this blog. Thank you for your sharing this informative blog. Just now I have completed hadoop certification course at a leading academy. If you are looking for best Hadoop Training in Chennai visit FITA IT training and placement academy which offer Big Data Training in Chennai.

    BeantwoordenVerwijderen
  6. Salesforce Course in Chennai


    I have read your blog and i got a very useful and knowledgeable information from your blog.You have done a great job . If anyone want to get Salesforce Training in Chennai, Please visit FITA academy located at Chennai Velachery. Rated as No.1 Salesforce Training Institutes in Chennai.

    Salesforce Developer Training in Chennai | Salesforce Admin Training in Chennai

    BeantwoordenVerwijderen
  7. Hi, I am Emi lives in Chennai. I am technology freak. I did Android mobile application development course in Chennai at reputed training institutes, this is very usful for me to make a bright carrer in IT industry. So If you looking for best Android Training Institute in Chennai please visit fita academy which offers real time Android Training in Chennai at reasonable cost.

    BeantwoordenVerwijderen
  8. Your posts is really helpful for me.Thanks for your wonderful post. I am very happy to read your post.
    PHP Training in chennai | PHP Training chennai | PHP course in chennai | PHP course chennai

    BeantwoordenVerwijderen
  9. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.
    Advanced Excel Training in chennai | Advanced Excel Training in chennai

    BeantwoordenVerwijderen
  10. Oracle DBA Training in Chennai
    Thanks for sharing this informative blog. I did Oracle DBA Certification in Greens Technology at Adyar. This is really useful for me to make a bright career..

    BeantwoordenVerwijderen
  11. Data warehousing Training in Chennai
    I am reading your post from the beginning, it was so interesting to read & I feel thanks to you for posting such a good blog, keep updates regularly..

    BeantwoordenVerwijderen
  12. Selenium Training in Chennai
    Wonderful blog.. Thanks for sharing informative blog.. its very useful to me..

    BeantwoordenVerwijderen
  13. Oracle Training in chennai
    Thanks for sharing such a great information..Its really nice and informative..

    BeantwoordenVerwijderen
  14. I have read your blog and i got a very useful and knowledgeable information from your blog.You have done a great job.
    SAP Training in Chennai

    BeantwoordenVerwijderen
  15. This information is impressive..I am inspired with your post writing style & how continuously you describe this topic. After reading your post,thanks for taking the time to discuss this, I feel happy about it and I love learning more about this topic
    Android Training In Chennai In Chennai

    BeantwoordenVerwijderen
  16. Pretty article! I found some useful information in your blog, it was awesome to read,thanks for sharing this great content to my vision, keep sharing..
    Unix Training In Chennai

    BeantwoordenVerwijderen
  17. I found some useful information in your blog, it was awesome to read, thanks for sharing this great content to my vision, keep sharing..
    SalesForce Training in Chennai

    BeantwoordenVerwijderen
  18. There are lots of information about latest technology and how to get trained in them, like Best Hadoop Training In Chennai have spread around the web, but this is a unique one according to me. The strategy you have updated here will make me to get trained in future technologies Hadoop Training in Chennai By the way you are running a great blog. Thanks for sharing this blogs..

    BeantwoordenVerwijderen
  19. I am very impressed with the article I have just read,so nice.......
    Dot Net Training in Chennai

    BeantwoordenVerwijderen
  20. Hi Admin,
    This information is impressive; I am inspired with your post writing style & how continuously you describe this topic. After reading your post, thanks for taking the time to discuss this, I feel happy about it and I love learning more about this topic.s
    Regards,
    sas training chennai|sas institutes in Chennai|sas training institutes in Chennai

    BeantwoordenVerwijderen
  21. Hello,
    I really enjoyed while reading your article, the information you have mentioned in this post was damn good. Keep sharing your blog with updated and useful information.
    Regards,
    Informatica training in chennai|Best Informatica Training In Chennai|Informatica training center in Chennai

    BeantwoordenVerwijderen
  22. I really enjoyed while reading your article, the information you have mentioned in this post was damn good. Keep sharing your blog with updated and useful information.
    Regards,
    Oracle Course in Chennai|Oracle DBA Training in Chennai

    BeantwoordenVerwijderen
  23. I am happy to find this post Very useful for me, as it contains lot of information

    ahmedabadclassifieds
    Article submission sites

    BeantwoordenVerwijderen
  24. The blog is well written. Thanks for your information.Java is fast, secure and reliable platform. there are lots of application and websites works under java and it is platform independant
    JAVA Training Center in Coimbatore
    JAVA Training
    JAVA Certification Course
    JAVA Certification Training
    JAVA Training Courses

    BeantwoordenVerwijderen
  25. Awwsome informative blog ,Very good information thanks for sharing such wonderful blog with us ,after long time came across such knowlegeble blog. keep sharing such informative blog with us.
    Aviation Academy in Chennai | Aviation Courses in Chennai | Best Aviation Academy in Chennai | Aviation Institute in Chennai | Aviation Training in Chennai

    BeantwoordenVerwijderen