New to LDAP realms - please help!

Vasuki Seshadri

unread,

Apr 16, 2001, 9:47:21 PM4/16/01

to

Hi,

I am new to Java security and I am trying to get the LDAP realm working quickly.
I have tried out a simple JSP test to see if I can talk to the LDAP Realm I created.
Here is my JSP code:

BasicRealm realm = Realm.getRealm("HPEDRealm");
String userName = request.getParameter("user");
User user = realm.getUser(userName);
out.println("The user is: " + user.toString());

I don't think it can get any simpler than this. I have created a LDAP realm called
HPEDRealm in the admin console, and it seems to be ok. Here's the entry from config.xml:

But I always get this error:

java.lang.IllegalAccessError: java.security.acl.NotOwnerException
at weblogic.security.acl.Realm.getRealm(Realm.java:91)
at weblogic.security.acl.Realm.getRealm(Realm.java:36)
at jsp_servlet._ldaptest._jspService(_ldaptest.java:91)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:213)
at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:1265)
at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:1622)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)

I know I'm missing something simple. Can anyone help me out?
Thanks,

Vasuki.

Satya Ghattu

unread,

Apr 17, 2001, 10:49:19 AM4/17/01

to

Seshadri,

Could you please tell us what version of WLS you are using and the service
pack?

thanks,
satya
Vasuki Seshadri <vasuki_...@hp.com> wrote in message
news:3adb9299$1...@newsgroups.bea.com...

Vasuki Seshadri

unread,

Apr 17, 2001, 2:47:15 PM4/17/01

to

Sorry - Using WLS 6.0 SP1.

Vasuki.

David Graves

unread,

Apr 17, 2001, 7:23:09 PM4/17/01

to Vasuki Seshadri

Try turning off the

GroupIsContext setting in your LDAP realm>group.

Vasuki Seshadri

unread,

Apr 18, 2001, 3:24:05 AM4/18/01

to

Tried that. Still getting the same error...

Vasuki.

><html><head></head><body>Try turning off the <pre wrap="">GroupIsContext
>setting in your LDAP realm>group.</pre>
> 
> 
>Vasuki Seshadri wrote: 
><blockquote type="cite" cite="mid:3adc81a3$1...@newsgroups.bea.com"><pre
>wrap="">Sorry - Using WLS 6.0 SP1. Vasuki. "Satya Ghattu"
><a class="moz-txt-link-rfc2396E" href="mailto:sa...@PleasePostToTheGroup.com"><sa...@PleasePostToTheGroup.com></a>
>wrote: </pre>
> <blockquote type="cite"><pre wrap="">Seshadri, Could you please
>tell us what version of WLS you are using and the service pack? thanks, satya Vasuki
>Seshadri <a class="moz-txt-link-rfc2396E" href="mailto:vasuki_...@hp.com"><vasuki_...@hp.com></a>
>wrote in message <a class="moz-txt-link-freetext" href="news:3adb9299$1...@newsgroups.bea.com">news:3adb9299$1...@newsgroups.bea.com</a>... </pre><blockquote
>type="cite"><pre wrap="">Hi, I am new to Java security
>and I am trying to get the LDAP realm working </pre></blockquote><pre
>wrap="">quickly. </pre><blockquote type="cite"><pre wrap="">I have
>tried out a simple JSP test to see if I can talk to the LDAP </pre></blockquote><pre
>wrap="">Realm I created. </pre><blockquote type="cite"><pre wrap="">Here
>is my JSP code: BasicRealm realm = Realm.getRealm("HPEDRealm"); String
>userName = request.getParameter("user"); User user = realm.getUser(userName); out.println("The
>user is:
>" + user.toString()); I don't think it can get any simpler than
>this. I have created a LDAP </pre></blockquote><pre wrap="">realm
>called </pre><blockquote type="cite"><pre wrap="">HPEDRealm in the
>admin console, and it seems to be ok. Here's the entry </pre></blockquote></blockquote>
> <pre wrap="">>from config.xml: </pre>
> <blockquote type="cite"><blockquote type="cite"><pre wrap=""><LDAPRealm
>AuthProtocol="simple" Credential="tlclgbst01" GroupDN="o=hp.com"
>GroupIsContext="true" GroupNameAttribute="ou" GroupUsernameAttribute="cn"
>LDAPURL="ldap://ldap.hp.com:389" Name="HPEDRealm" Principal="cn=tlclportal,
>ou=applications, o=hp.com" SSLEnable="false" UserAuthentication="local"
>UserDN="o=hp.com" </pre></blockquote><pre wrap="">UserNameAttribute="uid"/> </pre><blockquote
>type="cite"><pre wrap="">But I always get this error: java.lang.IllegalAccessError:
>java.security.acl.NotOwnerException at weblogic.security.acl.Realm.getRealm(Realm.java:91) at
>weblogic.security.acl.Realm.getRealm(Realm.java:36) at jsp_servlet._ldaptest._jspService(_ldaptest.java:91) at
>weblogic.servlet.jsp.JspBase.service(JspBase.java:27) at </pre></blockquote><pre
>wrap="">weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java :213) </pre><blockquote
>type="cite"><pre wrap="">at </pre></blockquote><pre wrap="">weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo ntext.java:1265) </pre><blockquote
>type="cite"><pre wrap="">at </pre></blockquote><pre wrap="">weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java :1622) </pre><blockquote
>type="cite"><pre wrap="">at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137) at
>weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120) I
>know I'm missing something simple. Can anyone help me out? Thanks, Vasuki. </pre></blockquote></blockquote>
> </blockquote>
> 
></body></html>
>