Вот пытаюсь настроит настроить subj.
И возникли некоторые затруднения.
1. В первом случае логин проходит, но результат входа http://localhost:8080/manager/html
| Код |
HTTP Status 403 - Access to the requested resource has been denied
type Status report
message Access to the requested resource has been denied
description Access to the specified resource (Access to the requested resource has been denied) has been forbidden.
|
server.xml
| Код |
<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
connectionURL="ldap://localhost:389"
userPattern="uid={0},ou=Users,dc=my,dc=domain,dc=ru"
roleBase="ou=Roles,dc=my,dc=domain,dc=ru"
roleName="cn"
roleSearch="(memberUid={0})" />
|
Команда
| Код |
ldapsearch -v -x -b "dc=my,dc=domain,dc=ru" -W -D "uid=wwwmanager,ou=Users,dc=my,dc=domain,dc=ru" "(cn=manager)"
|
Выдаёт
| Код |
filter: (cn=manager)
requesting: All userApplication attributes
# extended LDIF
#
# LDAPv3
# base <dc=my,dc=domain,dc=ru> with scope subtree
# filter: (cn=manager)
# requesting: ALL
#
# manager, Roles, my.domain.ru
dn: cn=manager,ou=Roles,dc=my,dc=domain,dc=ru
objectClass: top
objectClass: posixGroup
gidNumber: 2001
cn: manager
description: Tomcat managers
memberUid: paulb
memberUid: wwwmanager
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
|
Во втором логин/пароль не проходит
По "cancel" сответственно ругается что
| Код |
You are not authorized to view this page. If you have not changed any configuration files,
please examine the file conf/tomcat-users.xml in your installation.
That file will contain the credentials to let you use this webapp.
|
server.xml
| Код |
<Realm className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionName="cn=Manager,dc=my,dc=domain,dc=ru"
connectionPassword="secret"
connectionURL="ldap://localhost:389"
roleBase="ou=roles,dc=my,dc=domain,dc=ru"
roleName="cn"
roleSearch="(memberUid={0})"
roleSubtree="false"
userSearch="(uid={0})"
userPassword="userPassword"
userPattern="uid={0},ou=Users,dc=my,dc=domain,dc=ru"
/>
|
PS
В случае
| Код |
<!-- Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase"/ -->
|
всё работает. |
