It's all about the answers!

Ask a question

LDAP configuration


Milan Krivic (98010172140) | asked May 26 '09, 10:47 a.m.
Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

<Realm>

Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

4 answers



permanent link
Milan Krivic (98010172140) | answered May 26 '09, 10:48 a.m.
Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

permanent link
Milan Krivic (98010172140) | answered May 26 '09, 10:49 a.m.
Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

permanent link
Balaji Krish (1.8k12) | answered May 26 '09, 1:09 p.m.
JAZZ DEVELOPER
Tech note : http://jazz.net/library/technote/92 explains configuring LDAP on Tomcat user directory.

-- Balaji
Jazz Server Team


Hi,

I established connection to Microsoft Active Directory on Jazz Team Server 1.0.1. I also accessed AD users, and added some of them to Project Area as a members. I tried to log in with some of AD users, but I couldn't! I read that I must configure Web Containter for LDAP in Tomcat (server.xml), but I found different insructions about parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this solution for my problem?

Thanks,

permanent link
Matt Lavin (2.7k2) | answered May 28 '09, 8:49 a.m.
FORUM MODERATOR / JAZZ DEVELOPER
Do your LDAP group names match the Jazz group names exactly?
(JazzAdmins, JazzUsers).

If the group names don't match the Jazz groups exactly you would need to
update the web.xml in the jazz.war file to handle the differences.
https://jazz.net/wiki/bin/view/Main/LDAP4Dummies should have more
details about that process.


-
Matt Lavin
Jazz Server Team


On Tue, 2009-05-26 at 15:23 +0000, milan.krivic wrote:
Hi,

I established connection to Microsoft Active Directory on Jazz Team
Server 1.0.1. I also accessed AD users, and added some of them to
Project Area as a members. I tried to log in with some of AD users,
but I couldn't! I read that I must configure Web Containter for LDAP
in Tomcat (server.xml), but I found different insructions about
parameters which must be configured:

Realm
className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://ldap.company.com:3268"
authentication="simple"
referrals="follow"
connectionName="cn=LDAPUser,ou=Service
Accounts,dc=company,dc=com"
connectionPassword="VerySecretPassword"
userSearch="(sAMAccountName={0})"
userBase="dc=company,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="dc=company,dc=com"


Can anyone tell me which of these parameters are needed and is this
solution for my problem?

Thanks,

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.