Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual page 57

Adobe LiveCycle
Installing and Configuring LiveCycle Security Products for JBoss
For example, if your directory uses the schema attribute
use the following XML for the search filter option:
<module-option name =
"searchfilterPrefix">(&amp;(objectClass=*)(uid=</module-option>
<module-option name = "searchfilterSuffix">))</module-option>
When a user logs in, LiveCycle Policy Server retrieves the user identification and uses it to build the search
filter. It then searches for the user record to use for authentication.
Tip: You need to escape special characters in your XML code.
The sample application element is named
login-config.xml file in the [LiveCycle root]/product/conf directory. You can copy the element to the
login-config.xml file in the [appserver root]/conf directory.
Note: The Internet Engineering Task Force (IETF) Request for Comments (RFC) 2254 defines the syntax for
LDAP search filters. For information about search filters that is specific to the LDAP server, see the
documentation for the LDAP server.
For example application policies for Sun ONE and Active Directory, see
page 58.
The following table describes each property that can be configured.
Configurable option
user.provider.url
java.naming.security.authentication The LDAP authentication type.
searchUser
searchUsingAnonymousBind
binduser
bindpassword
basedn
searchfilterprefix
searchfiltersuffix
for the user login identification, you would
uid
UsernamePwd_Auth_Search
Description
The LDAP URL to your directory server (for example,
ldap://servername:port)
Set to true to force a search for the user with the dynamically
constructed DN.
Specifies whether access to the directory is controlled by using
authentication:
- No authentication is performed, and no user
true
●
information is needed to perform the search.
- Authentication is performed. A user identification and
false
●
password are required to perform the search.
The DN of the user record that can access the directory for
searching. This option has no value when
searchUsingAnonymousBind is
The password associated with the DN specified in the binduser
module option. This option has no value when
searchUsingAnonymousBind is
The base DN of your directory.
The portion of the search filter on the left of the user identification.
The portion of the search filter on the right of the user identification.
Manually Configuring JBoss
Configuring JAAS authentication
, and resides in the
"Example application policies" on
.
true
.
true
57