Databases
StackOverflow2013
Postsdbo
POWSO2 Data Services Server and LDAP Integration
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POWSO2 Data Services Server and LDAP Integration
    primarykey
    data
    text
    <p>I am currently trying to integrate WSO2 Data Services Server with my company LDAP server. I have followed closely the steps in the DSS admin guide: <a href="http://wso2.org/project/data-services/2.6.3/docs/user-core/admin_guide.html#LDAP" rel="nofollow">http://wso2.org/project/data-services/2.6.3/docs/user-core/admin_guide.html#LDAP</a> under the section: 5. How to Configure an External LDAP User Store / Active Directory User Store</p> <p>After some trouble shooting I was able to start the DSS Server with the LDAP settings in<br> CARBON_HOME\repository\conf\user-mgt.xml</p> <p>However, when I try to login in via the admin page @ </p> <pre><code>https://localhost:9443/carbon/admin/login.jsp </code></pre> <p>using my LDAP user id and password, I was not able to login successfully.</p> <p>The error message in CARBON_HOME\repository\logs\wso2carbon.log : </p> <blockquote> <p>WARN {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} - Failed Administrator login attempt 'userID[0]' at [2012-05-16 11:33:49,0720] from IP address 127.0.0.1 {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil}</p> </blockquote> <p>Following is my configuration file:</p> <pre><code>&lt;UserManager&gt; &lt;Realm&gt; &lt;Configuration&gt; &lt;AdminRole&gt;admin&lt;/AdminRole&gt; &lt;AdminUser&gt; &lt;UserName&gt;userID&lt;/UserName&gt; &lt;Password&gt;XXXXXX&lt;/Password&gt; &lt;/AdminUser&gt; &lt;EveryOneRoleName&gt;everyone&lt;/EveryOneRoleName&gt; &lt;!-- By default users in this role sees the registry root --&gt; &lt;Property name="url"&gt;jdbc:h2:repository/database/WSO2CARBON_DB;DB_CLOSE_ON_EXIT=FALSE&lt;/Property&gt; &lt;Property name="userName"&gt;wso2carbon&lt;/Property&gt; &lt;Property name="password"&gt;wso2carbon&lt;/Property&gt; &lt;Property name="driverName"&gt;org.h2.Driver&lt;/Property&gt; &lt;Property name="maxActive"&gt;50&lt;/Property&gt; &lt;Property name="maxWait"&gt;60000&lt;/Property&gt; &lt;Property name="minIdle"&gt;5&lt;/Property&gt; &lt;/Configuration&gt; &lt;!-- If product is using an external LDAP as the user store in read only mode, use following user manager --&gt; &lt;UserStoreManager class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager"&gt; &lt;Property name="ReadOnly"&gt;true&lt;/Property&gt; &lt;Property name="MaxUserNameListLength"&gt;100&lt;/Property&gt; &lt;Property name="ConnectionURL"&gt;ldap://ldap.xx.xx.xx:389&lt;/Property&gt; &lt;Property name="ConnectionName"&gt;cn=ssssss,OU=YYYYYY,dc=aa,dc=bb,dc=cc&lt;/Property&gt; &lt;Property name="ConnectionPassword"&gt;pppppp&lt;/Property&gt; &lt;Property name="UserSearchBase"&gt;DC=aa,DC=bb,DC=cc&lt;/Property&gt; &lt;Property name="UserNameListFilter"&gt;(objectClass=user)&lt;/Property&gt; &lt;Property name="UserNameAttribute"&gt;cn&lt;/Property&gt; &lt;Property name="ReadLDAPGroups"&gt;false&lt;/Property&gt; &lt;Property name="GroupSearchBase"&gt;ou=system&lt;/Property&gt; &lt;Property name="GroupNameListFilter"&gt;(objectClass=groupOfNames)&lt;/Property&gt; &lt;Property name="GroupNameAttribute"&gt;cn&lt;/Property&gt; &lt;Property name="MembershipAttribute"&gt;member&lt;/Property&gt; &lt;Property name="UserRolesCacheEnabled"&gt;true&lt;/Property&gt; &lt;Property name="ReplaceEscapeCharactersAtUserLogin"&gt;true&lt;/Property&gt; &lt;/UserStoreManager&gt; &lt;AuthorizationManager class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager"&gt; &lt;Property name="AdminRoleManagementPermissions"&gt;/permission&lt;/Property&gt; &lt;!-- Uncommenting the following element will enable the periodically running permission update task. It is disabled by default. --&gt; &lt;!-- &lt;Property name="UpdatePermissionTreePeriodically"&gt;true&lt;/Property&gt; --&gt; &lt;/AuthorizationManager&gt; &lt;/Realm&gt; &lt;/UserManager&gt; </code></pre> <p>I have also referred to this link: <a href="http://wso2.org/library/knowledge-base/import-ldap-users-carbon-based-products" rel="nofollow">http://wso2.org/library/knowledge-base/import-ldap-users-carbon-based-products</a> about "How to Import LDAP Users to WSO2 Carbon Based Products" But it doesn't seem to be applicable to DSS as it has no option to "Add External User Store" in the User Management page.</p> <p>Will appreciate any advice in what I have done wrong. I am using wso2dataservices-2.6.3.</p> <p>Thanks!</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. USрüффп
    1. USgkl
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POWSO2 Data Services Server and LDAP Integration
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POWSO2 Data Services Server and LDAP Integration
      1. This table or related slice is empty.
      1. VTUpMod
    1. COIs your admin role 'admin' in the ldap as well? Also, can you double check the User based properties. Even though this is not there in the UI for DSS, you are following the correct method and it should just work once the configuration is done right.
      singulars
      1. POWSO2 Data Services Server and LDAP Integration
      1. USdev_nut
    2. COThanks. I have managed to resolve the issue by doing a fresh installation of DSS, with the user-mgt.xml set pointing to the external ldap BEFORE i start the server for the first time.
      singulars
      1. POWSO2 Data Services Server and LDAP Integration
      1. USgkl
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload