Ldap authentication

[Tim Terhorst]

Greetings,

I'm having some issues getting webical to authenticate to ldap. Per
the install guide I have commented out the mysql section of
context.xml, yet I can still login as a user that is only in the mysql
db. Is there anything else I need to be doing except for changing the
config file to get ldap auth working?
There doesn't seem to be much information on it except for what's on
the wiki and this mailing list. This is on a 64 bit debian vm running
the 2.6.26 kernel. Here is my context.xml:

<Context path="" antiJARLocking="true" antiResourceLocking="true"
reloadable="true" crossContext="true">

<!-- <Realm className="org.apache.catalina.realm.JDBCRealm"
debug="4"
driverName="com.mysql.jdbc.Driver"
connectionName="webical"
connectionPassword="webical"
connectionURL="jdbc:mysql://localhost:3306/webical?
autoReconnect=true"
userTable="_auth_user"
userNameCol="username"
userCredCol="userpass"
userRoleTable="_auth_userrole"
roleNameCol="role"/>
-->

<Realm className="org.apache.catalina.realm.JNDIRealm"
debug="4"
connectionURL="ldap://<ip>:389"
secure="false"
userPattern="uid={0},ou=people,dc=site,dc=com"
roleName="cn"
roleSearch="(memberUid={1})"/>

<Resource
name="jdbc/calendarDataBase"
auth="Container"
type="javax.sql.DataSource"
factory="org.apache.tomcat.dbcp.dbcp.BasicDataSourceFactory"
username="webical"
password="webical"
driverClassName="com.mysql.jdbc.Driver"
url="jdbc:mysql://localhost:3306/webical?autoReconnect=true" />
</Context>

Any thoughts?
Please let me know if you need any more information from me, log
files, etc.

Regards,
Tim Terhorst

[Ivo van Dongen]

Hi,

Sorry for the late reply, your mail got lost in my inbox I'm afraid.
Glancing at your context file it seems fine, although I can't be sure as
configuring a realm in tomcat has always been a pain for me. I don't
know which version of tomcat you are running, but you can check out
their manual here:
http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html. Notice the
debug settings, this is always helpful to get things going.
It is odd that the mysql realm is still picked up though, I'm afraid
that the new configuration is simply not noticed by tomcat. Make sure
tomcat is really reloading from your context file and not one in the
working directory.

Regards,
Ivo