Help with Tomcat to Liberty Profile LDAP Migration
I have successfully gone through an upgrade from 5.0.2 to 6.0.1. I am migrating from Tomcat to Liberty profile during the process. I am now verifying my upgrade and I am unable to login. It seems to be a problem with the LDAP config settings.
I get the error saying:
Original Tomcat Settings:
Any ideas?
I get the error saying:
[12/21/15 11:14:26:550 EST] 00000069 com.ibm.ws.security.wim.registry.util.LoginBridge E CWIML4537E: The login operation could not be completed. The specified principal name rjcar
ter is not found in the back-end repository.
[12/21/15 11:14:26:550 EST] 00000069 y.authentication.jaas.modules.UsernameAndPasswordLoginModule A CWWKS1100A: Authentication did not succeed for user ID rjcarter. An invalid user ID or pas
sword was specified.I need assistance in checking the LDAP setting.
Original Tomcat Settings:
<Realm className="org.apache.catalina.realm.JNDIRealm"
roleBase="ou=groups,dc=company,dc=com"
roleName="cn"
roleSearch="(uniqueMember={0})"
roleSubtree="true"
userBase="ou=people,dc=company,dc=com"
userSearch="(cn={0})"
userSubtree="true"
/>Liberty Profile Settings:
<ldapRegistry baseDN="dc=company,dc=com"
ldapType="Custom"
recursiveSearch="true"">
<idsFilters groupFilter="(cn=%v)"
groupIdMap="*:cn"
groupMemberIdMap="ibm-allGroups:member;ibm-allGroups:uniqueMember"
userFilter="(cn=%v)"
userIdMap="*:cn">
</idsFilters>
<customFilters groupIdMap="*:cn"
groupMemberIdMap="*:uniqueMember"
userIdMap="*:cn"/>
</ldapRegistry>
Any ideas?
Comments
Robert Carter
Dec 21 '15, 12:02 p.m.I was able to use the IBM ldapsearch utility and get a hit back from from LDAP server.
ldapsearch -b "dc=company,dc=com" -h "ldap.company.com" -p 389 -D "uid=ldapuser,ou=system" -w password "(&(cn=rjcarter)(objectclass=InetOrgPerson))" cn