我需要在jboss eap中配置ldap,以便用户能够在我的AD中存在的情况下访问应用程序URL。
环境详细信息 JBoss EAP 6.2,Windows 7 64位+ Chrome Windows客户端工作站,Server 2008 Active Directory
在Standalone.xml中完成配置
<security-domain name="my_ldap_security_domain">
<authentication>
<login-module code="LdapExtended" flag="required">
<module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
<module-option name="java.naming.provider.url" value="ldap://AD IP:389"/>
<module-option name="java.naming.security.authentication" value="simple"/>
<module-option name="bindDN" value="CN=siddharth,DC=eco,DC=com"/>
<module-option name="bindCredential" value="secret"/>
<module-option name="baseCtxDN" value="DC=eco,DC=com"/>
<module-option name="baseFilter" value="(uid={0})"/>
<module-option name="rolesCtxDN" value="CN=sso,DC=eco,DC=com"/>
<module-option name="roleFilter" value="(member={1})"/>
<module-option name="roleAttributeID" value="cn"/>
<module-option name="throwValidateError" value="true"/>
<module-option name="searchScope" value="SUBTREE_SCOPE"/>
<module-option name="unauthenticatedIdentity" value="guest"/>
</login-module>
</authentication>
</security-domain>
服务器日志错误
10:21:32,455 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null 10:21:32,459 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000200:Begin isValid,principal:siddharth,cache entry:null 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000209:defaultLogin,校长:siddharth 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,尝试父配置null 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,尝试父配置null 10:21:32,462 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:32,462 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:32,463 DEBUG [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000206:登录失败:javax.security.auth.login.LoginException:没有为其他配置LoginModule 在javax.security.auth.login.LoginContext.init(未知来源)[rt.jar:1.7.0_79] 在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79] 在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79] 在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:179)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:162)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] at java.security.AccessController.doPrivileged(Native Method)[rt.jar:1.7.0_79] 在org.jboss.security.authentication.SubjectActions.createLoginContext(SubjectActions.java:332)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:407)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:345)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:333)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:146)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:216)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14] 在org.apache.catalina.authenticator.BasicAuthenticator.authenticate(BasicAuthenticator.java:178)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:465)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14] 在org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.coyote.http11.Http11Protocol $ Http11ConnectionHandler.process(Http11Protocol.java:653)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.tomcat.util.net.JIoEndpoint $ Worker.run(JIoEndpoint.java:920)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在java.lang.Thread.run(未知来源)[rt.jar:1.7.0_79]
10:21:32,465 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000201:结束isValid,result = false 10:21:32,466 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null 10:21:37,310 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000200:Begin isValid,principal:siddharth,cache entry:null 10:21:37,310 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000209:defaultLogin,校长:siddharth 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,尝试父配置null 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,尝试父配置null 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:37,313 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:37,313 DEBUG [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000206:登录失败:javax.security.auth.login.LoginException:没有为其他配置LoginModule 在javax.security.auth.login.LoginContext.init(未知来源)[rt.jar:1.7.0_79] 在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79] 在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79] 在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:179)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:162)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] at java.security.AccessController.doPrivileged(Native Method)[rt.jar:1.7.0_79] 在org.jboss.security.authentication.SubjectActions.createLoginContext(SubjectActions.java:332)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:407)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:345)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:333)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:146)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1] 在org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:216)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14] 在org.apache.catalina.authenticator.BasicAuthenticator.authenticate(BasicAuthenticator.java:178)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:465)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14] 在org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.coyote.http11.Http11Protocol $ Http11ConnectionHandler.process(Http11Protocol.java:653)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在org.apache.tomcat.util.net.JIoEndpoint $ Worker.run(JIoEndpoint.java:920)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1] 在java.lang.Thread.run(未知来源)[rt.jar:1.7.0_79]
10:21:37,322 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000201:结束isValid,result = false 10:21:37,323 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null
请帮助我解决问题。