Hi Kees de Kooter ,
thnaks for your right.
Can you have a look into my application.
I'm using the Apache Tomcat JNDIRealm for authentication againist LDAP.
For this i'm following the tutorial at http://tomcat.apache.org/tomcat-4.0-doc/realm-howto.html#JNDIRealm and http://viralpatel.net/blogs/2008/12/implement-ldap-authentication-in-tomcat-jboss-server-for-java-app.html
According to this, i configured the server.xml(inside tomcat) and web.xml (inside my web application).
The following is my server.xml.
[CODE]<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
connectionName="cn=Manager,dc=example,dc=com"
connectionPassword="secret"
connectionURL="ldap://192.168.25.193:389"
userPassword="userPassword"
userPattern="uid={0},ou=People,dc=example,dc=com"
roleBase="ou=Roles,dc=example,dc=com"
roleName="cn"
roleSearch="(member={0})" />[CODE]
The following is my web.xml
[CODE]<?xml version="1.0" encoding="ISO-8859-1"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_5.xsd"
version="2.5">
<description>Tomcat JNDIRealm to Authenticate User</description>
<display-name>Tomcat JNDIRealm to Authenticate User</display-name>
<servlet>
<servlet-name>LoginAuthentication</servlet-name>
<servlet-class>
com.test.realm.LoginAuthentication
</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>LoginAuthentication</servlet-name>
<url-pattern>/login</url-pattern>
</servlet-mapping>
<!-- Welcome file list -->
<welcome-file-list>
<welcome-file>index.jsp</welcome-file>
</welcome-file-list>
<!-- Realm Settings -->
<security-constraint>
<display-name>Example Security Constraint</display-name>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<!-- Define the context-relative URL(s) to be protected -->
<url-pattern>/*</url-pattern>
<!-- If you list http methods, only those methods are protected -->
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>org.apache.catalina.realm.JNDIRealm</realm-name>
</login-config>
</web-app>[CODE]
And my LoginAuthentication.java servlet is,
[CODE]package com.test.realm;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.security.Principal;
public class LoginAuthentication extends HttpServlet {
/**
*
*/
private static final long serialVersionUID = 1L;
private ServletConfig config;
public void init(ServletConfig config) throws ServletException {
this.config = config;
}
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
PrintWriter out = response.getWriter();
response.setContentType("text/html");
Principal principal = request.getUserPrincipal();
String userName = principal.getName();
// String userName = "ganesh";
// String passwrd = "ganesh";
/*
* if (userName.equals(request.getParameter("user")) &&
* passwrd.equals(request.getParameter("pass"))) {
*/
if (userName.equals(request.getParameter("user"))) {
out.println("WELCOME " + userName);
} else {
out.println("Please enter correct username and password");
out.println("<a href='AuthenticLogin.jsp'><br>Login again</a>");
}
}
}
[CODE]
and my login.jsp is,
[CODE]<form name="frm" action="login"
method="post" >
Name: <input type="text" name="user"
value="" /><br>
Password:<input type="password" name="pass" value="" /><br>
<br>
<input type="submit" value="Sign-In" />
<input type="reset" value="Reset" />
</form>[CODE]
NOTE: I kept jndi.jar inside the tomcat/common/lib directory.
But after restarting the server , AFter issueing admin and admin (tomcat admin name and pwd) it is showing the following error instead of showing all the deployed applications.
*"HTTP Status 403 - Access to the requested resource has been denied"*
So can You suggest me how to authenticate (code for checking the login credentials with ldap)... In ldap i have some users and some roles. each user is associated with some roles. My requirement is After login, if login is successful, then i need to display the username and his roles in the success page else failure page.
Now please help me.
Thanks again for ur support,
Regards,
Ganesh