Hi Ron,
Thanks for your reply. Here are the configuration files. When I use an active directory client tool, it works fine.
ldap_login.conf:
com.day.crx {
com.day.crx.core.CRXLoginModule sufficient;
com.day.crx.security.ldap.LDAPLoginModule required
principal_provider.name="RootDSE"
principal_provider.class="com.day.crx.security.ldap.principals.LDAPPr incipalProvider"
host="<MYLDAPHOST>"
port="389"
authDn="CN=Murali,OU=Users Accounts (UnSorted),DC=us,DC=ad,DC=com"
authPw="March1234%"
userRoot="OU=eBT,OU=Users Accounts (UnSorted),DC=us,DC=ad,DC=com"
userIdAttribute="sAMAccountName"
groupRoot="CN=eBT-IWOV,OU=eBT,OU=User and Group Accounts,DC=us,DC=ad,DC=com"
groupMembershipAttribute="member"
autocreate="create"
autocreate.path="none"
autocreate.user.cn="rep:fullname"
autocreate.user.mail="profile/email"
autocreate.user.sn="profile/familyName"
autocreate.user.givenName="profile/givenName"
autocreate.group.cn="rep:fullname";
autocreate.group.mail="profile/email"
cache.expiration="7200"
cache.maxsize="200"
};
repository.xml:
<!DOCTYPE Repository PUBLIC "-//Day Management AG//DTD CRX 2.4//EN"
"http://www.day.com/dtd/repository-2.4.dtd">
<Repository>
<!--
virtual file system where the repository stores global state
(e.g. registered namespaces, custom node types, etc.)
-->
<!--
<FileSystem class="com.day.jackrabbit.fs.cq.CQFileSystem">
<param name="path" value="${rep.home}/repStore.dat"/>
<param name="autoRepair" value="false"/>
</FileSystem>
-->
<FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
<param name="path" value="${rep.home}/repository"/>
</FileSystem>
<!--
large binary objects are stored in the data store.
-->
<DataStore class="com.day.crx.core.data.ClusterDataStore"/>
<!--
security configuration
-->
<Security appName="com.day.crx">
<!--
security manager:
class: FQN of class implementing the JackrabbitSecurityManager interface
-->
<!--SecurityManager class="com.day.crx.core.CRXSecurityManager" workspaceName="" -->
<SecurityManager class="com.day.crx.core.CRXSecurityManager">
<!--
optional user manager configuration
-->
<UserManager class="org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserM anager">
<param name="usersPath" value="/home/users"/>
<param name="groupsPath" value="/home/groups"/>
<param name="defaultDepth" value="1"/>
<param name="autoExpandTree" value="true"/>
<AuthorizableAction class="org.apache.jackrabbit.core.security.user.action.AccessControlA ction">
<param name="groupPrivilegeNames" value="jcr:read"/>
<param name="userPrivilegeNames" value="jcr:all"/>
</AuthorizableAction>
<!--AuthorizableAction class="com.day.crx.core.ntlm.NTLMAuthorizableAction"/>-->
</UserManager>
<!--
optional workspace access manager configuration
-->
</SecurityManager>
<!--
access manager:
class: FQN of class implementing the AccessManager interface
-->
<AccessManager class="org.apache.jackrabbit.core.security.DefaultAccessManager"></Ac cessManager>
<!--
Use LoginModule authenticating against repository itself
-->
<!--LoginModule class="com.day.crx.core.CRXLoginModule">
<param name="anonymousId" value="anonymous"/>
<param name="adminId" value="admin"/>
<param name="disableNTLMAuth" value="true"/>
<param name="tokenExpiration" value="43200000"/>
</LoginModule-->
</Security>
<!--
location of workspaces root directory and name of default workspace
-->
<Workspaces rootPath="${rep.home}/workspaces" defaultWorkspace="crx.default" maxIdleTime="5"/>
<!--
workspace configuration template:
used to create the initial workspace if there's no workspace yet
-->
<Workspace name="${wsp.name}" simpleLocking="true">
<!--
virtual file system of the workspace:
class: FQN of class implementing FileSystem interface
-->
<FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
<param name="path" value="${wsp.home}"/>
</FileSystem>
<!--
persistence manager of the workspace:
class: FQN of class implementing PersistenceManager interface
-->
<PersistenceManager class="com.day.crx.persistence.tar.TarPersistenceManager"/>
<!--
Search index and the file system it uses.
-->
<SearchIndex class="com.day.crx.query.lucene.LuceneHandler">
<param name="path" value="${wsp.home}/index"/>
<param name="resultFetchSize" value="50"/>
</SearchIndex>
<!--
Workspace security configuration
-->
<WorkspaceSecurity>
<AccessControlProvider class="org.apache.jackrabbit.core.security.authorization.acl.ACLProvi der">
<param name="omit-default-permission" value="true"/>
</AccessControlProvider>
</WorkspaceSecurity>
<!--
XML Import configuration of the workspace
-->
<Import>
<ProtectedItemImporter class="org.apache.jackrabbit.core.xml.AccessControlImporter"/>
<ProtectedItemImporter class="org.apache.jackrabbit.core.security.user.UserImporter">
<param name="importBehavior" value="besteffort"/>
</ProtectedItemImporter>
</Import>
</Workspace>
<!--
Configures the versioning
-->
<Versioning rootPath="${rep.home}/version">
<!--
Configures the filesystem to use for versioning of the respective
persistence manager
-->
<FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
<param name="path" value="${rep.home}/version"/>
</FileSystem>
<!--
Configures the persistence manager to use for the versioning.
Please note, that the current versioning implementation is based on
a 'normal' persistence manager, but this could change in future
implementations.
-->
<PersistenceManager class="com.day.crx.persistence.tar.TarPersistenceManager"/>
</Versioning>
<!--
Enable searching the /jcr:system subtree
-->
<SearchIndex class="com.day.crx.query.lucene.LuceneHandler">
<param name="path" value="${rep.home}/repository/index"/>
</SearchIndex>
<!--
Cluster configuration.
-->
<Cluster>
<Journal class="com.day.crx.persistence.tar.TarJournal"/>
</Cluster>
<!--
Configures extension modules
-->
<Modules>
<!--
Sample configuration of an EventLoggerModule requiring configuration
<Module class="com.day.crx.eventlogger.EventLoggerModule">
<param name="workspaces" value="crx.default"/>
<param name="logWorkspace" value="crx.logger"/>
<param name="logPath" value="/logger"/>
</Module>
-->
</Modules>
</Repository>
for instance, add a logger for the ldap package.|
