LDAP configuration

Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

Tech note : http://jazz.net/library/technote/92 explains configuring LDAP on Tomcat user directory.

-- Balaji
Jazz Server Team

Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

Do your LDAP group names match the Jazz group names exactly?
(JazzAdmins, JazzUsers).

If the group names don't match the Jazz groups exactly you would need to
update the web.xml in the jazz.war file to handle the differences.
https://jazz.net/wiki/bin/view/Main/LDAP4Dummies should have more
details about that process.


-
Matt Lavin
Jazz Server Team


On Tue, 2009-05-26 at 15:23 +0000, milan.krivic wrote:

Hi,

I established connection to Microsoft Active Directory on Jazz Team
Server 1.0.1. I also accessed AD users, and added some of them to
Project Area as a members. I tried to log in with some of AD users,
but I couldn't! I read that I must configure Web Containter for LDAP
in Tomcat (server.xml), but I found different insructions about
parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service
Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this
solution for my problem?

Thanks,