[Opensource] User authentication

[Mike Traum]

Interesting ... did you do Expresso authentication using Tomcat's realm
facility, or do you use that for other applications and go directly into
LDAP from Expresso?

Can we have a look at the code?

Mike

-----Original Message-----
From: opensource-admin at jcorporate.com
[mailto:opensource-admin at jcorporate.com]On Behalf Of Bjorn Granvik
Sent: Tuesday, June 11, 2002 12:49 AM
To: opensource at jcorporate.com
Subject: RE: [Opensource] User authentication


Hi,

We at Jayway have a running LDAP-based solution using:
	Expresso 4.02/Tomcat 4.0,
	QcSlapd (ldap server) and
	LDAP Browser/Editor (http://www.iit.edu/~gawojar/ldap/).

I've just offered our code to Sandra Cann (not knowing where to ask really)
in the hope that it might be a step towards an LDAP-aware Expresso. Our
solution probably isn't optimal, since we had to change some files more than
just to supply a UserLDAP. We currently have users and group information
stored in the LDAP server and a Tomcat/LDAP realm based login together with
the changes in the Expresso code.

This way we secure both java based files (i.e. expresso controlled code like
jsp-files) and other files like html, doc, pdf etc with a single sign on.

Again, there probably is a better solution waiting, but our code is running.

Cheers,
Bjorn Granvik
Jaway




> -----Original Message-----
> From: opensource-admin at jcorporate.com
> [mailto:opensource-admin at jcorporate.com]On Behalf Of Mike Traum
> Sent: den 10 juni 2002 22:27
> To: opensource at jcorporate.com
> Subject: RE: [Opensource] User authentication
>
>
> I have to do the same at some point.
>
> Any comments/caveots, Clyde?
>
> Mike
>
> -----Original Message-----
> From: opensource-admin at jcorporate.com
> [mailto:opensource-admin at jcorporate.com]On Behalf Of Michael Rimov
> Sent: Monday, June 10, 2002 2:01 PM
> To: opensource at jcorporate.com
> Subject: Re: [Opensource] User authentication
>
>
> At 03:30 PM 6/10/2002 +0200, you wrote:
> >Is it possible to implement a LDAP user authentication system in
> Expresso?
> >If yes, does it take al lot of effort to do this?
>
> Yes it is possible.  I think it is Clyde O. that has done it for his own
> organization.  The basic idea is take UserLDAP object and create your
> own.  Then add a <classhandler> for the user object that points to your
> UserLDAP object.
>
> HTH!
>                                                          -Mike
>
> _______________________________________________
> Opensource mailing list
> Opensource at jcorporate.com
> http://mail.jcorporate.com/mailman/listinfo/opensource
> Archives: http://mail.jcorporate.com/pipermail/opensource/
>
> _______________________________________________
> Opensource mailing list
> Opensource at jcorporate.com
> http://mail.jcorporate.com/mailman/listinfo/opensource
> Archives: http://mail.jcorporate.com/pipermail/opensource/

_______________________________________________
Opensource mailing list
Opensource at jcorporate.com
http://mail.jcorporate.com/mailman/listinfo/opensource
Archives: http://mail.jcorporate.com/pipermail/opensource/