🚀 go-pugleaf

Hi,


We have a problem with EJB security in Websphere Application Server
when using OpenLDAP for authentfication.
In the WAS admin console in the Advanced Global Security Settings we
have changed the User Filter and User ID Map to use "person" instead
of "InetOrgPerson". All other Global Security settings are pretty much
as default.
We have created a method group MyMG and have granted permissions to
users in LDAP via the Assign Permissions Wizard.
In the Configure Resource Security Wizard we have selected MyMG to
protect our bean method.

At this point we hoped that WAS would prompt the user for
userID/password and authenticate it with OpenLDAP, when we try to
access the protected bean method.
But the case is, that WAS does not authenticate the entered
userId/password with OpenLDAP. When the userID/password was entered as
prompted, a "java.rmi.ServerException: RemoteException occurred in
server thread; nested exception is:
com.ibm.websphere.csi.CSIException: Authorization failed for..." was
thrown, and no LDAP authentication was actually done. We can see that
because there is no log activity during this process, as there
normally are.

As far as we ca see, WAS has a connection to OpenLDAP as we are
prompted for the manager userID/password when logging in to the admin
console. And the LDAP users are also visible in the Assign Permissions
Wizard.

As we have spend hours to solve this problem, it seems that this task
was not so basically after all :0)
But someone must have tried to authenticate users with WAS/OpenLDAP
with success before. What are we doing wrong? Have we missed some
settings?

Thank in advance...
Brian Hallkvist
brian@proactive.dk