Tuesday, February 3, 2009

Configuring Form Based Authentication with Sun Java LDAP

Repro steps which helped me configure FBA with Sun java  , please get back to me if you need any help on it as well as iam sending the web.config code which I have configured on my test environment



 => Repro steps

========

 => downloaded Sun Java System Directory Server 5 2005Q4 (5.2 P4)






=> installed it on the Sql server 2005

=> created a OU

=> created groups

=> created users in it

=> created a new web app on the SharePoint server http://moss2:1000

=>extended the site on 1001

=> edited the web.config of the central admin



TechNet link in which the code in present to configure the web.config




  

Configuration Example for Sun Java System (formerly iPlanet and SunONE)



<membership defaultProvider="LdapMembership">

  <providers>

    <add

    name="LdapMembership"

    type="Microsoft.Office.Server.Security.LDAPMembershipProvider,

    Microsoft.Office.Server, Version=12.0.0.0, Culture=neutral,

    PublicKeyToken=71E9BCE111E9429C"

    server="myServerName"

    port="21801"

    useSSL="false"

    userDNAttribute="entryDN"

    userNameAttribute="uid"

    userContainer="dc=CONTOSO,dc=COM"

    userObjectClass="Inetorgperson"

    userFilter="(ObjectClass=Inetorgperson)"

    scope="Subtree"

    otherRequiredUserAttributes="sn,givenname,cn"

    />

  </providers>

</membership>



<roleManager defaultProvider="LdapRole" enabled="true" cacheRolesInCookie="false" cookieName=".PeopleDCRole">

  <providers>

    <add

    name="LdapRole"

    type="Microsoft.Office.Server.Security.LDAPRoleProvider,

    Microsoft.Office.Server, Version=12.0.0.0, Culture=neutral,

    PublicKeyToken=71E9BCE111E9429C"

    server="myServerName"

    port="21801"

    useSSL="false"

    groupContainer="dc=CONTOSO,dc=COM"

    groupNameAttribute="cn"

    groupMemberAttribute="uniqueMember"

    userNameAttribute="uid"

    dnAttribute="entryDN"

    groupFilter="(ObjectClass=groupofuniquenames)"

    scope="Subtree"

    />

  </providers>

</roleManager>

  

=> also edited the web.config of the site 



Configuration Example for Sun Java System (formerly iPlanet and SunONE)



<membership defaultProvider="LdapMembership">

  <providers>

    <add

    name="LdapMembership"

    type="Microsoft.Office.Server.Security.LDAPMembershipProvider,

    Microsoft.Office.Server, Version=12.0.0.0, Culture=neutral,

    PublicKeyToken=71E9BCE111E9429C"

    server="myServerName"

    port="21801"

    useSSL="false"

    userDNAttribute="entryDN"

    userNameAttribute="uid"

    userContainer="dc=CONTOSO,dc=COM"

    userObjectClass="Inetorgperson"

    userFilter="(ObjectClass=Inetorgperson)"

    scope="Subtree"

    otherRequiredUserAttributes="sn,givenname,cn"

    />

  </providers>

</membership>



<roleManager defaultProvider="LdapRole" enabled="true" cacheRolesInCookie="false" cookieName=".PeopleDCRole">

  <providers>

    <add

    name="LdapRole"

    type="Microsoft.Office.Server.Security.LDAPRoleProvider,

    Microsoft.Office.Server, Version=12.0.0.0, Culture=neutral,

    PublicKeyToken=71E9BCE111E9429C"

    server="myServerName"

    port="21801"

    useSSL="false"

    groupContainer="dc=CONTOSO,dc=COM"

    groupNameAttribute="cn"

    groupMemberAttribute="uniqueMember"

    userNameAttribute="uid"

    dnAttribute="entryDN"

    groupFilter="(ObjectClass=groupofuniquenames)"

    scope="Subtree"

    />

  </providers>

</roleManager>



=> made the changes in the authentication for the web app and changed it to forms and in the providers made the required changes

LDAPMembershipProvider and LdapRole



=> add the user to the policy for web application

=> opened the site and logged in with the user

=> added the group to the site

=> the site was working fine without any issues.


No comments:

Post a Comment

Users cannot see the checked out files in the folder/ library

I Came across a Issue today wherein the user opened a ticket for the below issue Issue : Users cannot see the checked out files in the fo...