Integrating Seam Security with OpenLDAP

The link is broken. The correct version adds an s to articles: My Link

Adam

Hello Shane, I have an article on how to authenticate on Apache DS, it's written in portuguese, but nothing that a google translator could help. Here's the link: My Link. I'm preparing the second part that uses the Identity Management to create users, and soon one for permissions.

Regards

Thanks for the link Vinicius. I'm still hoping to get my hands on some kind of Windows server running Active Directory too, that way most of the major LDAP directories will be covered.

You should not hijack an existing schema to add your attributes to. Please create your own.

Thanks.

Hi !

I have the same problem. Have you find a solution ?

Thanks ! Nicolas

Shane i have tested it, but the role groups are not working. Do I need to setup anything additional for it?.

When i create a role as member of another role, The role is create but the member of property in the list stays blank. When i edit a role and try to save the role it fails.

Regards

In relation to my question about groups. 1. I have reviewed the source code, the method addRoleToGroup is not implemented. 2. It was failing because there was a problem in the method roleExists, i have patched this method implemented the same functionality that is in userExists method.

Regards

Great article. An alternative to the process of downloading openldap: since you are already using cygwin, select the optional openldap package from the cygwin net category. Then all you have to do is update the config files. Thanks!

with the .ldif ,the LDAP service run successfully. but I can't login seamspace.

Hi Shane,

I am trying to authenticate users against Windows Active directory. I am following security chapter given in seam reference manual to configure Ldap-identity-store in my components.xml file. Here are my components.xml and login.xhtml files.

<?xml version="1.0" encoding="UTF-8"?>
<components xmlns="http://jboss.com/products/seam/components"
            xmlns:core="http://jboss.com/products/seam/core"
            xmlns:persistence="http://jboss.com/products/seam/persistence"
            xmlns:drools="http://jboss.com/products/seam/drools"
            xmlns:bpm="http://jboss.com/products/seam/bpm"
            xmlns:security="http://jboss.com/products/seam/security"
            xmlns:mail="http://jboss.com/products/seam/mail"
            xmlns:web="http://jboss.com/products/seam/web"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation=
                "http://jboss.com/products/seam/core http://jboss.com/products/seam/core-2.2.xsd
                 http://jboss.com/products/seam/persistence http://jboss.com/products/seam/persistence-2.2.xsd
                 http://jboss.com/products/seam/drools http://jboss.com/products/seam/drools-2.2.xsd
                 http://jboss.com/products/seam/bpm http://jboss.com/products/seam/bpm-2.2.xsd
                 http://jboss.com/products/seam/security http://jboss.com/products/seam/security-2.2.xsd
                 http://jboss.com/products/seam/mail http://jboss.com/products/seam/mail-2.2.xsd
                 http://jboss.com/products/seam/web http://jboss.com/products/seam/web-2.2.xsd
                 http://jboss.com/products/seam/components http://jboss.com/products/seam/components-2.2.xsd">

   <core:init debug="true" jndi-pattern="@jndiPattern@"/>

   <core:manager concurrent-request-timeout="500"
                 conversation-timeout="120000"
                 conversation-id-parameter="cid"
                 parent-conversation-id-parameter="pid"/>

   <!-- Make sure this URL pattern is the same as that used by the Faces Servlet -->
   <web:hot-deploy-filter url-pattern="*.seam"/>

   <persistence:entity-manager-factory name="entityManagerFactory"
                      persistence-unit-name="user"/>

   <persistence:managed-persistence-context name="entityManager" auto-create="true"
                          entity-manager-factory="#{entityManagerFactory}"/>
   <drools:rule-base name="securityRules">
      <drools:rule-files><value>/security.drl</value></drools:rule-files>
   </drools:rule-base>

   <security:rule-based-permission-resolver security-rules="#{securityRules}"/>

  <!--<security:identity authenticate-method="#{authenticator.authenticate}" remember-me="true" />-->
   
   <security:identity-manager identity-store="#{ldapIdentityStore}" /> 
   <security:ldap-identity-store name="ldapIdentityStore" 
                server-address="intra.cogitate-it.com"
                server-port="389"
                bind-DN="CN=Administrator,CN=Users,DC=intra,DC=cogitate-it,DC=com"
                bind-credentials="W3lc0m3" 
                user-DN-prefix="cn="
                user-name-attribute="cn"
                user-DN-suffix=",OU=HQ, OU=DEV, dc=intra, dc=cogitate-it, dc=com"
                user-context-DN="OU=HQ, OU=DEV, dc=intra, dc=cogitate-it, dc=com"
                user-object-classes="user"
/>
   
   <!-- newly added on 09-04-10-->
<!-- <identity-management:jpa-identity-store name="identityStore" account-class="com.user.Customer"/> -->
<!-- add ended-->

   <event type="org.jboss.seam.security.notLoggedIn">
      <action execute="#{redirect.captureCurrentView}"/>
   </event>
   <event type="org.jboss.seam.security.loginSuccessful">
      <action execute="#{redirect.returnToCapturedView}"/>
   </event>

   <mail:mail-session host="localhost" port="25"/>

   <!-- For use with jBPM pageflow or process management -->
   <!--
   <bpm:jbpm>
      <bpm:process-definitions></bpm:process-definitions>
      <bpm:pageflow-definitions></bpm:pageflow-definitions>
   </bpm:jbpm>
   -->
   
</components>

Login.xhtml

<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ui:composition xmlns="http://www.w3.org/1999/xhtml"
    xmlns:s="http://jboss.com/products/seam/taglib"
    xmlns:ui="http://java.sun.com/jsf/facelets"
    xmlns:f="http://java.sun.com/jsf/core"
    xmlns:h="http://java.sun.com/jsf/html"
    xmlns:rich="http://richfaces.org/rich"
    template="layout/templateLogin.xhtml">

<ui:define name="body">

    <h:form id="loginForm">

        <rich:panel>
            <f:facet name="header">Login</f:facet>

            <p>Please login here</p>

            <div class="dialog">
                <h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
                    <h:outputLabel for="username">Username</h:outputLabel>
                    <h:inputText id="username"
                              value="#{credentials.username}"/>
                    <h:outputLabel for="password">Password</h:outputLabel>
                    <h:inputSecret id="password"
                                value="#{credentials.password}"/>
                    <h:outputLabel for="rememberMe">Remember me</h:outputLabel>
                    <h:selectBooleanCheckbox id="rememberMe"
                                          value="#{rememberMe.enabled}"/>
                </h:panelGrid>
            </div>

           <!--  <p>
              <i>Note - </i> You may login with the username 'admin' and a blank password.
            </p>--> 

        </rich:panel>

        <div class="actionButtons">
            <h:commandButton id="submit" value="Login" action="#{identity.login}"/>
        </div>

    </h:form>

 </ui:define>
</ui:composition>

i get the following error

WARN SeamLoginModule Error invoking login method

Do i need to write any seam component to authenticate jus like Authenticator.java? Please help me in solving my problem.

Thanks Vasuki