JTS authentication should allow LDAP and PWD at the same time
In a complex org some
users can be ldap'd, others cannot due to connectivity speed to a poorly located
dns or perhaps domain distribution prevents authentication in a timely manner. It would
be great if the JTS server could be set up for ldap for most users and yet allow a few to
be userid/pwd authenticated; currently it is either/or not both. CQ
allows either or.
We need LDAP to be organizationally compliant but for some remote users or newly acquired companies entering the mother ship, they need to access team concert more quickly than what our network people can accommodate. Is there a way to allow JTS to simultaneously authenticate some users by ldap and other users by userid/password? |
Accepted answer
Ralph Schoon (63.6k●3●36●46)
| answered Jun 19 '12, 3:52 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Hi Andrew,
can you have a look here: https://jazz.net/library/article/604 https://jazz.net/library/#q=realm provides more hits. In general this is dependent on the application server, as far as I know. https://jazz.net/library/article/91 talks about the architecture. Essentially the JTS delegates authentication to the application server. It does not know or keep passwords. WAS seems to support multiple realms. I am not sure about Tomcat. Andy Detandt selected this answer as the correct answer
|
2 other answers
As Ralph states, you can configure WAS to federate an LDAP realm and user realm. For a Tomcat-based installation, I believe that you will have to write your own custom realm to do this federation - last time I checked, Tomcat didn't ship with a hybrid or federated realm mechanism.
|
Ralph Schoon (63.6k●3●36●46)
| answered Nov 02 '12, 3:06 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER edited Nov 02 '12, 3:07 a.m.
Please see https://jazz.net/library/article/604 As far as I can tell this only works with WAS.
|
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.