Implement LDAP authentication in Tomcat & JBoss server for Java app

bob says:

So interesting! I couldn’t even guess it might be so exciting!

Aditya says:

You can use request.getRemoteUser() instead.

guga says:

Hi,

One question: what should be the LDAP “structure” for the logins to succeed?

I mean, how can I tell what DN to use, how to find users, and where are the roles defined in LDAP?

I can have for example a DN like this:
uid=jack, ou=people, dc=example, dc=com

So the user will have attributes in LDAP, the password for example, and the roles … where in LDAP will I define user roles so that JBoss will pick them from the correct attribute?

Thanks

Naveen says:

Hi Viral,

Thanks for such a wonderful site.
I tried to implement this, but i had no success.
The authentication window pops up but when i give uid and pwd it doesnot take it.
After 3 attempts i get 404 error.

1. I updated server.xml
2.Update web.xml
3 .Added jars to commons/lib directory too.

Thanks,
Naveen.

dhaval0129 says:

Hi

This Tutorial is incomplete and does not help,

rd says:

Viral,

is the info for implementing ldap still valid for JBOSS AS 7

sanz says:

@rd I did not find any login-config.xml in JBoss 7. So I am not sure if this tutorial is applicable for AS 7.

murali says:

hi i am trying to integrate jack rabbit to the jboss .. if u have any idea just post it…. and mail me also…. and i forgot to tell something ur post s are very help full to me at the time of need

RahamaTullah says:

I am new to LDAP , please explain me in detail, how roles are defined in this concept, and we have to use only jboss ? no other servers we have to use please answer this

Tilak says:

Hi Viral,

Have implemented the same in apache successfully. Tested too. But how the same can be done for Websphere 7?

Can you please tell us in detail?

Thanks !!!

khaleed says:

Hi Viral,

I am new to LDAP can you please mail me the steps for the implementation of LDAP.

Thanks & Regards,
Khaleed K

ram says:

Hi Viral,

I am new to LDAP can you please mail me the steps for the implementation of LDAP.

Thanks & Regards,
Ram.

brijesh says:

not working in eclipse..error of popup is::”A username and password are being requested by http://localhost:8080. The site says: “Please enter your Username””

brijesh says:

import java.security.Principal;

import javax.servlet.http.HttpServletRequest;

import org.apache.struts2.interceptor.ServletRequestAware;
public class DemoLDAP implements ServletRequestAware{
	private static HttpServletRequest request;
	/* (non-Javadoc)
	 * @see org.apache.struts2.interceptor.ServletRequestAware#setServletRequest(javax.servlet.http.HttpServletRequest)
	 */
	public void setServletRequest(HttpServletRequest httpServletRequest) {
		 this.request = httpServletRequest;
	} 
	public static void main(String args[]){
		Principal principal = request.getUserPrincipal();
		String userName = principal.getName();
		System.out.println("userName:::"+userName);
	}
}

but this is not working..

komeiming says:

Hi Viral,
Could you email a java demo about Configurations in JBoss Server, great thanks.

nitesh says:

hi Viral
i wants to implement ldap auth feature in my application which is deployed on tomcat
and can i use netscape plugin (if it is available for tomcat)
can you please help me in that.

Praveen says:

Hi Viral,
Firstly thanks for the blog and the Post.
It would have been good if you have specified the JBOSS and Tomcat versions.
This is becos
1) in JBOSS 7.1.1 Final the login-config.xml. does not exist.
2) JBOSS directory naming a structure is different.

Thanks
Praveen

VenkateshDeepak says:

Hi Viral., Thanks for posting.

When i tried to implement this,., the browser is asking for user name and password credentials.
Why it is so?

AditiN says:

I didnt understand what exactly this code does?
When i includ all code in web application and after that i create war and deploy on jboss it gives me one popup for username and password.. my changes are given below

login-config.xml
<application-policy name="LDAPAuth">
	<authentication>
 	<login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
 	<module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
 	<module-option name="java.naming.provider.url">ldap://localhost:10389</module-option> <!-- LDAP url-->
 	<module-option name="java.naming.security.authentication">simple</module-option>
 	<module-option name="bindDN">cn=Manager,dc=base,dc=com</module-option> <!-- LDAP user to connect -->
 	<module-option name="bindCredential">base123</module-option> <!-- LDAP password -->
	<module-option name="principalDNPrefix">uid=</module-option> 
	<module-option name="principalDNSuffix">,ou=People,dc=base,dc=com</module-option> 
	<module-option name="searchScope">ONELEVEL_SCOPE</module-option><!-- Search for groups in all subtrees -->
 	<module-option name="baseCtxDN">ou=People,dc=base,dc=com</module-option>
 	<module-option name="baseFilter">(uid={0})</module-option>
 
	<module-option name="rolesCtxDN">ou=Roles,dc=base,dc=com</module-option> <!-- context where to search for groups -->
 	<module-option name="roleFilter">(member={1})</module-option> <!-- filter, this searches for groups which have the user set in the attribute 'uniquemember' -->
 	<module-option name="roleAttributeID">cn</module-option>
 	
 	 <module-option name="roleRecursion">0</module-option> <!--how many levels to search recursively inside a group for a user  -->
 	<module-option name="allowEmptyPasswords">false</module-option>
 	</login-module>
 	</authentication>
	</application-policy>

jboss-web.xml

<jboss-web>
  <security-domain>java:/jaas/base</security-domain>
</jboss-web>

in web.xml

  <security-constraint>
      <web-resource-collection>
          <web-resource-name>HtmlAuth</web-resource-name>
          <description>application security constraints</description>
          <url-pattern>/*</url-pattern>
          <http-method>GET</http-method>
          <http-method>POST</http-method>
      </web-resource-collection>
      <auth-constraint>
          <role-name>*</role-name>
      </auth-constraint>
  </security-constraint>
  
  <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>LDAPAuth realm</realm-name>
  </login-config>
  
  <security-role>
      <role-name>*</role-name>
  </security-role>

What exactly this code does?
which username and password i want to put for authentication?
Kindly do the needful.

dinesh says:

i had a doubt that is LDAP is protocol or server or else with the combination of application we create the ldap server

Arti says:

Hi Viral,I want to implement LDAP authentication on Apache tomcat server.I tired with above information provided,but it’s not working.Plzzzzz can you help on this.