How to configure authentication using Active Directory
thu...@gmail.com
Anyone ever configure Camunda using Active Directory authentication.
I configured as following but it was not work. Camunda can connect to LDAP server but authentication failed:
<!-- LDAP CONFIGURATION -->
<!-- Uncomment this section in order to enable LDAP support for this process engine -->
<!-- Adjust configuration, see ( http://docs.camunda.org/latest/guides/user-guide/#process-engine-identity-service-the-ldap-identity-service ) -->
<plugin>
<class>org.camunda.bpm.identity.impl.ldap.plugin.LdapIdentityProviderPlugin</class>
<properties>
<property name="serverUrl">ldap://****</property>
<property name="acceptUntrustedCertificates">true</property>
<property name="managerDn">uid=***,ou=***,dc=***,dc=***,dc=***</property>
<property name="managerPassword">****</property>
<property name="baseDn">DC=***,DC=***,DC=***</property>
<property name="userSearchBase"></property>
<property name="userSearchFilter">(&(objectCategory=user)(objectClass=user))</property>
<property name="userIdAttribute">sAMAccountName</property>
<property name="userFirstnameAttribute">givenName</property>
<property name="userLastnameAttribute">sn</property>
<property name="userEmailAttribute">mail</property>
<property name="userPasswordAttribute">userPassword</property>
<property name="groupSearchBase">OU=Groups</property>
<property name="groupSearchFilter">(objectCategory=group)</property>
<property name="groupIdAttribute">distinguishedName</property>
<property name="groupNameAttribute">sAMAccountName</property>
<property name="groupMemberAttribute">member</property>
</properties>
</plugin>
<!-- LDAP CONFIGURATION -->
<!-- The following plugin allows you to grant administrator authorizations to an existing LDAP user -->
<plugin>
<class>org.camunda.bpm.engine.impl.plugin.AdministratorAuthorizationPlugin</class>
<properties>
<property name="administratorUserName">*****</property>
</properties>
</plugin>
Daniel Meyer
could you define "it was not work"? Do you get an exception?
Thanks!
Daniel
--
Camunda Technical Lead
Blog: http://long-running.net/
Twitter: @meyerdan
Thuy Le
Thuy Le
On Friday, September 4, 2015 at 1:30:25 PM UTC+7, Daniel Meyer wrote:
webcyberrob
Thuy Le
Hi,
I have integrated some software to use AD for authentication already; hence, I know what the system account you mentioned is. In fact, I created a dedicated account to query AD. I tried to use a wrong password, Camunda log showed another error message (cannot connect to LDAP server), so I think the system account information was correct.
I used my domain account for testing so I am sure that username, password I use to login Camunda are correct as well. Furthermore, I tried to telnet LDAP server and port, this port is reachable. There should not be any network issue.
Do you have any example Camunda configure file which use AD for authentication?
Thank you and best regards,
Thuy Le
--
You received this message because you are subscribed to a topic in the Google Groups "camunda BPM users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/camunda-bpm-users/Mw8SsG_4QcM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to camunda-bpm-us...@googlegroups.com.
To post to this group, send email to camunda-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/camunda-bpm-users/316e46ee-c806-4246-9a68-dffd710aef6b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.