ldap on os390

[Heather Scott]

Has anyone been able to get weblogic to work with the os390 ldap
server? If so, can you forward me your ldaprealm.properties file?

I get the following error:

Unable to initialize server:
weblogic.security.ldaprealm.LDAPRealmException: caught unexpected
excepti
on - with nested exception:
[netscape.ldap.LDAPException: error result (87)]
fatal initialization exception
weblogic.security.ldaprealm.LDAPRealmException: caught unexpected
exception - with nested exception:
[netscape.ldap.LDAPException: error result (87)]
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Compiled Code) at
java.lang.RuntimeException.<init>(RuntimeException.java:47)
at
weblogic.utils.NestedRuntimeException.<init>(NestedRuntimeException.java:23)

at
weblogic.security.ldaprealm.LDAPRealmException.<init>(LDAPRealmException.java:27)

at
weblogic.security.ldaprealm.LDAPDelegate.handleException(LDAPDelegate.java:865)

at weblogic.security.ldaprealm.LDAPDelegate.getGroup(Compiled
Code)
at
weblogic.security.ldaprealm.LDAPRealm.getGroup(LDAPRealm.java:75)
at
weblogic.security.acl.CachingRealm.getGroup(CachingRealm.java:1507)
at
weblogic.security.acl.CachingRealm.getPrincipal(CachingRealm.java:1092)
at weblogic.security.acl.CachingRealm.addPermission(Compiled
Code)
at weblogic.security.acl.CachingRealm.setupAcls(Compiled Code)

My ldaprealm.properties file looks like this:

server.alias=os390

os390.server.host=tsys
os390.server.principal=racfid=weblogic,profiletype=user,sysplex=testplex

os390.server.credential=xxxxxxx

os390.user.dn=profiletype=user,sysplex=testplex
os390.user.filter=(&(racfid=%u)(objectclass=racfUser))

os390.group.dn=profiletype=group,sysplex=testplex
os390.group.filter=(&(cn=%g)(objectclass=groupofnames))

os390.membership.filter=(&(member=%M)(objectclass=groupofnames))

Thanks,

--
Heather Scott

[James McGovern]

If you are running LDAP on an os390, you are most likely trying to talk to
RACF which is minimally LDAP compliant.

"Heather Scott" <heathe...@icbc.com> wrote in message
news:3B8D7612...@icbc.com...