Hi,

I tried the steps mentioned, but the steps mentioned above are jumped may be because of the different LDAP server. I am using Apache Directory Studio.

And even i could not find any option "import users from LDIF". Can you please guide me what exactly i need to do.

Regards,

Shailesh

Hi,

Sorry I was not clear about the problem in the msg. I am not able to get what LDIP needs to be entered in the dropdown over here in the screenshot.

Can you even verify the ldap_login.conf file whether is that there is something missing in it.

com.day.crx {

   com.day.crx.core.CRXLoginModule sufficient;

   com.day.crx.security.ldap.LDAPLoginModule required

              principal_provider.class="com.day.crx.security.ldap.principals.LDAPPrincipalProvider"

              host="10.242.135.12"

              port="10389"

     authDn="testuser"

              authPw="intel"

              secure="true"

              userRoot="ou=users,ou=system"

              groupRoot="ou=groups,ou=system"

              groupMembershipAttribute="uniquemember"

              autocreate="create"

              autocreate.user.mail="profile/email"

              autocreate.user.givenname="profile/givenName"

              autocreate.user.sn="profile/familyName"

              autocreate.group.description="profile/aboutMe"

              autocreate.group.mail="profile/email"

              autocreate.group.cn="profile/givenName"

              autocreate.path="direct"

              cache.expiration="600"

              cache.maxsize="100";

};

Thanks & Regards,

Shailesh

com.day.crx {

   com.day.crx.core.CRXLoginModule sufficient;

   com.day.crx.security.ldap.LDAPLoginModule required

              principal_provider.class="com.day.crx.security.ldap.principals.LDAPPrincipalProvider"

              host="192.168.1.8"

              port="10390"

     authDn="uid=testuser,ou=users,ou=system"

              authPw="abc11"

              secure="true"

              userRoot="ou=users,ou=system"

              groupRoot="ou=groups,ou=system"

              groupMembershipAttribute="uniquemember"

              autocreate="create"

              autocreate.user.mail="profile/email"

              autocreate.user.givenname="profile/givenName"

              autocreate.user.sn="profile/familyName"

              autocreate.group.description="profile/aboutMe"

              autocreate.group.mail="profile/email"

              autocreate.group.cn="profile/givenName"

              autocreate.path="direct"

              cache.expiration="600"

              cache.maxsize="100";

};

repository.xml

<?xml version="1.0" encoding="ISO-8859-1"?>
<!-- ======================================================================= -->
<!-- $Id: repository-template.xml 78567 2011-06-16 04:27:03Z tripod $ -->
<!-- ======================================================================= -->
<!-- Copyright (c) 1997-2008 Day Management AG                               -->
<!-- Barfuesserplatz 6, 4001 Basel, Switzerland                              -->
<!-- All Rights Reserved.                                                    -->
<!--                                                                         -->
<!-- This software is the confidential and proprietary information of        -->
<!-- Day Management AG, ("Confidential Information"). You shall not          -->
<!-- disclose such Confidential Information and shall use it only in         -->
<!-- accordance with the terms of the license agreement you entered into     -->
<!-- with Day.                                                               -->
<!-- ======================================================================= -->
<!DOCTYPE Repository PUBLIC "-//Day Management AG//DTD CRX 2.4//EN"
                            "http://www.day.com/dtd/repository-2.4.dtd">
<Repository>
    <!--
    virtual file system where the repository stores global state
    (e.g. registered namespaces, custom node types, etc.)
    -->
    <!--
    <FileSystem class="com.day.jackrabbit.fs.cq.CQFileSystem">
        <param name="path" value="${rep.home}/repStore.dat"/>
        <param name="autoRepair" value="false"/>
    </FileSystem>
    -->
    <FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
        <param name="path" value="${rep.home}/repository"/>
    </FileSystem>

    <!--
    large binary objects are stored in the data store.
    -->
    <DataStore class="com.day.crx.core.data.ClusterDataStore"/>

    <!--
    security configuration
    -->
    <Security appName="com.day.crx">
        <!--
            security manager:
            class: FQN of class implementing the JackrabbitSecurityManager interface
        -->
        <!--SecurityManager class="com.day.crx.core.CRXSecurityManager" workspaceName="" -->
        <SecurityManager class="com.day.crx.core.CRXSecurityManager">
            <!--
            optional user manager configuration
            -->
            <UserManager class="org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserManager">
                <param name="usersPath" value="/home/users"/>
                <param name="groupsPath" value="/home/groups"/>
                <param name="defaultDepth" value="1"/>
                <param name="autoExpandTree" value="true"/>
                <AuthorizableAction class="org.apache.jackrabbit.core.security.user.action.AccessControlAction">
                  <param name="groupPrivilegeNames" value="jcr:read"/>
                  <param name="userPrivilegeNames" value="jcr:all"/>
                </AuthorizableAction>
                <!--AuthorizableAction class="com.day.crx.core.ntlm.NTLMAuthorizableAction"/>-->
            </UserManager>

            <!--
            optional workspace access manager configuration
           -->
        </SecurityManager>
 
        <!--
        access manager:
        class: FQN of class implementing the AccessManager interface
        -->
        <AccessManager class="org.apache.jackrabbit.core.security.DefaultAccessManager"></AccessManager>
        <!--
        Use LoginModule authenticating against repository itself
        -->
        <LoginModule class="com.day.crx.core.CRXLoginModule">
            <param name="anonymousId" value="anonymous"/>
            <param name="adminId" value="admin"/>
            <param name="disableNTLMAuth" value="true"/>
            <param name="tokenExpiration" value="43200000"/>
            <!-- param name="trust_credentials_attribute" value="d5b9167e95dad6e7d3b5d6fa8df48af8"/ -->
        </LoginModule>
    </Security>

    <!--
    location of workspaces root directory and name of default workspace
    -->
    <Workspaces rootPath="${rep.home}/workspaces" defaultWorkspace="crx.default" maxIdleTime="5"/>
    <!--
    workspace configuration template:
    used to create the initial workspace if there's no workspace yet
    -->
    <Workspace name="${wsp.name}" simpleLocking="true">
        <!--
        virtual file system of the workspace:
        class: FQN of class implementing FileSystem interface
        -->
        <FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
            <param name="path" value="${wsp.home}"/>
        </FileSystem>

        <!--
        persistence manager of the workspace:
        class: FQN of class implementing PersistenceManager interface
        -->
        <PersistenceManager class="com.day.crx.persistence.tar.TarPersistenceManager"/>

        <!--
        Search index and the file system it uses.
        -->
        <SearchIndex class="com.day.crx.query.lucene.LuceneHandler">
            <param name="path" value="${wsp.home}/index"/>
            <param name="resultFetchSize" value="50"/>
        </SearchIndex>

        <!--
        Workspace security configuration
        -->
        <WorkspaceSecurity>
            <AccessControlProvider class="org.apache.jackrabbit.core.security.authorization.acl.ACLProvider">
                <param name="omit-default-permission" value="true"/>
            </AccessControlProvider>
        </WorkspaceSecurity>

        <!--
        XML Import configuration of the workspace
        -->
        <Import>
            <ProtectedItemImporter class="org.apache.jackrabbit.core.xml.AccessControlImporter"/>
            <ProtectedItemImporter class="org.apache.jackrabbit.core.security.user.UserImporter">
                <param name="importBehavior" value="besteffort"/>
            </ProtectedItemImporter>
        </Import>
    </Workspace>

    <!--
        Configures the versioning
    -->
    <Versioning rootPath="${rep.home}/version">
        <!--
            Configures the filesystem to use for versioning of the respective
            persistence manager
        -->
        <FileSystem class="org.apache.jackrabbit.core.fs.local.LocalFileSystem">
            <param name="path" value="${rep.home}/version"/>
        </FileSystem>

        <!--
            Configures the persistence manager to use for the versioning.
            Please note, that the current versioning implementation is based on
            a 'normal' persistence manager, but this could change in future
            implementations.
        -->
        <PersistenceManager class="com.day.crx.persistence.tar.TarPersistenceManager"/>

    </Versioning>

    <!--
        Enable searching the /jcr:system subtree
    -->
    <SearchIndex class="com.day.crx.query.lucene.LuceneHandler">
        <param name="path" value="${rep.home}/repository/index"/>
    </SearchIndex>

    <!--
        Cluster configuration.
    -->
    <Cluster>
        <Journal class="com.day.crx.persistence.tar.TarJournal"/>
    </Cluster>

    <!--
        Configures extension modules
    -->
    <Modules>
        <!--
           Sample configuration of an EventLoggerModule requiring configuration
           <Module class="com.day.crx.eventlogger.EventLoggerModule">
               <param name="workspaces" value="crx.default"/>
               <param name="logWorkspace" value="crx.logger"/>
               <param name="logPath" value="/logger"/>
           </Module>
        -->
    </Modules>
</Repository>

Hi,

I am still not able to login using the user i created in LDAP server. I have verified by using the jxplorer and the LDAP server is working fine as whatever user I am creating in jxplorer it is propagation and getting saved in the LDAP server.

By looking into the screenshot seeing above if you find anything that is missing, please do let me know.

Thanks & Regards,

Shailesh

Hi,

Still not able to login.., "User Name and Password do not match".

Is there anything else that could be there

Regards,

Shailesh

Hi,

My instance stopped working after I modified the repository.xml as threaded in the chain above. The two changes made were:-

1. added <SecurityManager class="com.day.crx.core.CRXSecurityManager">

        <WorkspaceAccessManager  class="org.apache.jackrabbit.core.

               security.simple.SimpleWorkspaceAccessManager"/>

        <UserManager class="com.day.crx.core.CRXUserManagerImpl">

            <param name="usersPath" value="/home/users"/>

            <param name="groupsPath" value="/home/groups"/>

            <param name="defaultDepth" value="1"/>

        </UserManager>

    </SecurityManager>

2. commented <LoginModule class="com.day.crx.core.CRXLoginModule">

            <param name="anonymousId" value="anonymous"/>

            <param name="adminId" value="admin"/>

            <param name="disableNTLMAuth" value="true"/>

            <param name="tokenExpiration" value="43200000"/>

        </LoginModule>

As I commented the first one and uncommented the second one in repository.xml my instance started working., before that I was getting

Service Unavailable

AuthenticationSupport service missing. Cannot authenticate request.

Is there anything else that could be done for this authentication part.?

Thanks & Regards,

Shailesh

Hi,

The links shared tells us the same things as we were trying before.

I tried every combination possible in repository.xml

1. LoginModule removed with org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserManager present. -503 error

2. LoginModule present with with org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserManager present. - able to open instance

3. LoginModule removed with com.day.crx.core.CRXUserManagerImpl presnt. -503 error

4. LoginModule present with com.day.crx.core.CRXUserManagerImpl present. -503 error

5. LoginModule present with com.day.crx.core.CRXUserManagerImpl & org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserManager presnt. -503 error

6. LoginModule removed with com.day.crx.core.CRXUserManagerImpl & org.apache.jackrabbit.core.security.user.UserPerWorkspaceUserManager present. -503 error

The ldap_login.confg used is

com.day.crx {

   com.day.crx.core.CRXLoginModule sufficient;

   com.day.crx.security.ldap.LDAPLoginModule required

              principal_provider.class="com.day.crx.security.ldap.principals.LDAPPrincipalProvider"

              host="10.242.135.208"

              port="10390"

   authDn="uid=admin,ou=system"

              authPw="admin"

   userFilter="(objectclass=person)"

              userIdAttribute="uid"

              groupFilter="(objectclass=groupOfUniqueNames)"

              groupMembershipAttribute="uniquemember"

              groupNameAttribute="cn"

              deny_anonymous_access="true"

              secure="true"

              userRoot="ou=users,ou=system"

              groupRoot="ou=groups,ou=system"

              groupMembershipAttribute="uniquemember"

              autocreate="create"

              autocreate.user.mail="profile/email"

              autocreate.user.givenname="profile/givenName"

              autocreate.user.sn="profile/familyName"

              autocreate.group.description="profile/aboutMe"

              autocreate.group.mail="profile/email"

              autocreate.group.cn="profile/givenName"

              autocreate.path="direct"

              cache.expiration="600"

              cache.maxsize="100";

};

Can you please verify if the authDn and the authPwd is correct or is there any mistake that I am commiting. Or there is something else which is causing the problem..

Thanks & Regards,

Shailesh