It's all about the answers!

Ask a question

JTS authentication should allow LDAP and PWD at the same time


Andy Detandt (535) | asked Jun 18 '12, 11:28 a.m.
In a complex org some users can be ldap'd, others cannot due to connectivity speed to a poorly located dns or perhaps domain distribution prevents authentication in a timely manner. It would be great if the JTS server could be set up for ldap for most users and yet allow a few to be userid/pwd authenticated; currently it is either/or not both. CQ allows either or.

We need LDAP to be organizationally compliant but for some remote users or newly acquired companies entering the mother ship, they need to access team concert more quickly than what our network people can accommodate.

Is there a way to allow JTS to simultaneously authenticate some users by ldap and other users by userid/password?


Accepted answer


permanent link
Ralph Schoon (63.6k33646) | answered Jun 19 '12, 3:52 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Hi Andrew,

can you have a look here: https://jazz.net/library/article/604

https://jazz.net/library/#q=realm provides more hits.

In general this is dependent on the application server, as far as I know. https://jazz.net/library/article/91 talks about the architecture. Essentially the JTS delegates authentication to the application server. It does not know or keep passwords. WAS seems to support multiple realms. I am not sure about Tomcat.
Andy Detandt selected this answer as the correct answer

2 other answers



permanent link
Todd Lainhart (40611) | answered Jun 19 '12, 12:05 p.m.
FORUM MODERATOR / JAZZ DEVELOPER
As Ralph states, you can configure WAS to federate an LDAP realm and user realm.  For a Tomcat-based installation, I believe that you will have to write your own custom realm to do this federation - last time I checked, Tomcat didn't ship with a hybrid or federated realm mechanism.

permanent link
Ralph Schoon (63.6k33646) | answered Nov 02 '12, 3:06 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
edited Nov 02 '12, 3:07 a.m.
Please see https://jazz.net/library/article/604 As far as I can tell this only works with WAS.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.