Sun Java Sytem Web Server 7.0 blogs Amit's Weblog

Thursday Jul 03, 2008

With the release of Web Server 7.0 Update 3, you can now configure the administration server to use LDAP authentication. The administration server is configured to use keyfile authentication by default and it can be switched to use LDAP authentication quite easily using either the administration GUI or CLI.

Let us use wadm CLI and see what it takes to switch to LDAP authentication against Sun Java System Directory Server.

wadm> enable-admin-ldap-auth --ldap-url=ldap://test.sunds.com:389/o=TestCentral --allow-group=testGroup
CLI213 The administration server needs to be restarted for the changes to take effect.

wadm> get-admin-ldap-auth-prop
enabled=true
ldap-url="ldap://test.sunds.com:389/o=TestCentral"
search-filter=uid
group-search-filter=uniquemember
group-search-attr=CN
timeout=10
allow-group=testGroup

Note that you have to restart the administration server for the changes to take effect.

You can switch back to the default keyfile authentication by executing the following command:

wadm> disable-admin-ldap-auth
CLI213 The administration server needs to be restarted for the changes to take effect.

You can see the same tasks being performed using the administration GUI in the following screen cast:

Comments:

Post a Comment:
  • HTML Syntax: NOT allowed