在JBOSS EAP

时间:2017-06-23 05:15:29

标签: jboss ldap

我需要在jboss eap中配置ldap,以便用户能够在我的AD中存在的情况下访问应用程序URL。

环境详细信息 JBoss EAP 6.2,Windows 7 64位+ Chrome Windows客户端工作站,Server 2008 Active Directory

在Standalone.xml中完成配置

<security-domain name="my_ldap_security_domain">
                <authentication>
                    <login-module code="LdapExtended" flag="required">
                        <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
                        <module-option name="java.naming.provider.url" value="ldap://AD IP:389"/>
                        <module-option name="java.naming.security.authentication" value="simple"/>
                        <module-option name="bindDN" value="CN=siddharth,DC=eco,DC=com"/>
                        <module-option name="bindCredential" value="secret"/>
                        <module-option name="baseCtxDN" value="DC=eco,DC=com"/>
                        <module-option name="baseFilter" value="(uid={0})"/>
                        <module-option name="rolesCtxDN" value="CN=sso,DC=eco,DC=com"/>
                        <module-option name="roleFilter" value="(member={1})"/>
                        <module-option name="roleAttributeID" value="cn"/>
                        <module-option name="throwValidateError" value="true"/>
                        <module-option name="searchScope" value="SUBTREE_SCOPE"/>
                        <module-option name="unauthenticatedIdentity" value="guest"/>
                    </login-module>
                </authentication>
            </security-domain>

服务器日志错误

10:21:32,455 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null 10:21:32,459 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000200:Begin isValid,principal:siddharth,cache entry:null 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000209:defaultLogin,校长:siddharth 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,​​尝试父配置null 10:21:32,460 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:32,461 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,​​尝试父配置null 10:21:32,462 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:32,462 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:32,463 DEBUG [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000206:登录失败:javax.security.auth.login.LoginException:没有为其他配置LoginModule     在javax.security.auth.login.LoginContext.init(未知来源)[rt.jar:1.7.0_79]     在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79]     在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79]     在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:179)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:162)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     at java.security.AccessController.doPrivileged(Native Method)[rt.jar:1.7.0_79]     在org.jboss.security.authentication.SubjectActions.createLoginContext(SubjectActions.java:332)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:407)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:345)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:333)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:146)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:216)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14]     在org.apache.catalina.authenticator.BasicAuthenticator.authenticate(BasicAuthenticator.java:178)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:465)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14]     在org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.coyote.http11.Http11Protocol $ Http11ConnectionHandler.process(Http11Protocol.java:653)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.tomcat.util.net.JIoEndpoint $ Worker.run(JIoEndpoint.java:920)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在java.lang.Thread.run(未知来源)[rt.jar:1.7.0_79]

10:21:32,465 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000201:结束isValid,result = false 10:21:32,466 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null 10:21:37,310 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000200:Begin isValid,principal:siddharth,cache entry:null 10:21:37,310 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000209:defaultLogin,校长:siddharth 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,​​尝试父配置null 10:21:37,311 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000221:开始getAppConfigurationEntry(其他),大小:3 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000222:getAppConfigurationEntry(其他),找不到条目,​​尝试父配置null 10:21:37,312 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000223:getAppConfigurationEntry(其他),父配置中没有条目,尝试默认其他 10:21:37,313 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000225:结束getAppConfigurationEntry(其他),找不到条目 10:21:37,313 DEBUG [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000206:登录失败:javax.security.auth.login.LoginException:没有为其他配置LoginModule     在javax.security.auth.login.LoginContext.init(未知来源)[rt.jar:1.7.0_79]     在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79]     在javax.security.auth.login.LoginContext。(未知来源)[rt.jar:1.7.0_79]     在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:179)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.SubjectActions $ LoginContextAction.run(SubjectActions.java:162)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     at java.security.AccessController.doPrivileged(Native Method)[rt.jar:1.7.0_79]     在org.jboss.security.authentication.SubjectActions.createLoginContext(SubjectActions.java:332)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:407)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:345)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:333)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:146)[picketbox-infinispan-4.0.19.SP2-redhat-1.jar:4.0.19.SP2-redhat-1]     在org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:216)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14]     在org.apache.catalina.authenticator.BasicAuthenticator.authenticate(BasicAuthenticator.java:178)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:465)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169)[jboss-as-web-7.3.0.Final-redhat-14.jar:7.3.0.Final-redhat-14]     在org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.coyote.http11.Http11Protocol $ Http11ConnectionHandler.process(Http11Protocol.java:653)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在org.apache.tomcat.util.net.JIoEndpoint $ Worker.run(JIoEndpoint.java:920)[jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]     在java.lang.Thread.run(未知来源)[rt.jar:1.7.0_79]

10:21:37,322 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000201:结束isValid,result = false 10:21:37,323 TRACE [org.jboss.security](http- / 0.0.0.0:8080-2)PBOX000354:设置安全角色ThreadLocal:null

请帮助我解决问题。

0 个答案:

没有答案