LDAP question

[Jerry]

Hi,

I have tried 4 days to link my company\'s LDAP, Microsoft AD. It dosen\'t work.

Could someone help me, please.

The only modification is the file \"login_config.xml\", right?

The syntax:


<application-policy name=\"OpenKM\">
<authentication>
<login-module code=\"org.jboss.security.auth.spi.LdapExtLoginModule\" flag=\"required\" >
<module-option name=\"java.naming.provider.url\">ldap:ad01.mydomain.com:389</module-option>
<module-option name=\"bindDN\">CN=Administrator,OU=Users,DC=mydomain,dc=com</module-option>
<module-option name=\"java.naming.security.authentication\">simple</module-option>
<module-option name=\"bindCredential\">admin_password</module-option>
<module-option name=\"baseCtxDN\">ou=my_department,dc=mydomain,dc=com</module-option>
<module-option name=\"baseFilter\">(sAMAccountName={0})</module-option>
<module-option name=\"rolesCtxDN\">ou=my_department,dc=mydomain,dc=com</module-option>
<module-option name=\"roleFilter\">(sAMAccountName={0})</module-option>
<module-option name=\"roleAttributeID\">memberOf</module-option>
<module-option name=\"roleAttributeIsDN\">true</module-option>
<module-option name=\"roleNameAttributeID\">cn</module-option>
<module-option name=\"roleRecursion\">-1</module-option>
<module-option name=\"searchScope\">SUBTREE_SCOPE</module-option>
<module-option name=\"defaultRole\">UserRol</module-option>
</login-module>
</authentication>
</application-policy>

[Jerry]

Hi,

The Syntax is right. It can work now.

[jllort]

Remember always must restart jboss when you change longin-config.xml

[phillman5]

Ok, so I am a Newbie,

I got OpenKM running, how do you stop it and JBoss?

[pavila]

$JBOSS_HOME/bin/shutdown.sh or simply CTRL+C in the terminal you have started JBoss (OpenKM).