I have read several documents in web related to Websphere setup with RTC and LDAP ( Active Directory) integrated
We have moved from Tomcat(bundled with RTC) to Websphere 8.5.5 for RTC(4.0.6) and we want to retain the same LDAP settings.
We have RTC logins ascase sensitiveand want to retain the same even with Websphere migration.
In JTS advanced page, we have case insensitive user ID matching set tofalse
In Websphere, in LDAP settings,
if we select
U
usera is now unarchived
Now, RTC allows the login but even on providing USerA during login, it converts the authorization as usera ID automatically.
If we de-select
Ignore case for authorization in WASLDAP settingthen it doesn't allow the login to RTC itself and gives Error 403 Forbidden that there is no permission to view the page
We have mapped the right LDAP Jazzgroups under jts_war and ccm_war
We migrated to WebSphere from tomcat w/o any issues of this sort. In our Global Security / Standalone LDAP realm, ignore case for authorization is checked. Non of the case sensitive settings was changed in any CLM application from their pre-websphere days.
Do you have the case sensitive the same in ALL applications ( not just the JTS ) ?
Not sure if this is a typo, but you mixed case of UserA -- assuming that's a real example ( USerA )
Ok, this is weird. I was able to login to a couple of different RTC we have ( one has case insensitive = true, another false ) using a mixed case version of my ID. My expectation would to have been rejected on the RTC with case insensitive = false.
Let me try with mixed case / bad password to see what WebSphere logs.
WebSphere logs the ID in the same case as I entered it.
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means.
Learn more here.
Comments
Kevin Ramer
Mar 05 '15, 8:44 a.m.We migrated to WebSphere from tomcat w/o any issues of this sort. In our Global Security / Standalone LDAP realm, ignore case for authorization is checked. Non of the case sensitive settings was changed in any CLM application from their pre-websphere days.
Do you have the case sensitive the same in ALL applications ( not just the JTS ) ?
Not sure if this is a typo, but you mixed case of UserA -- assuming that's a real example ( USerA )