Histórico da Página

HTML


<div id="main-content" class="wiki-content group">
	<p>
		Valid configurations for authentication in AD using the LDAP
		Protocol&#160;<span style="font-size: 10.0pt; line-height: 13.0pt;">(</span><span
			style="color: rgb(68, 68, 68);">Lightweight Directory Access
			Protocol)</span><span style="font-size: 10.0pt; line-height: 13.0pt;">.</span>
	</p>
	<p>&#160;</p>
	<p>
		To this end, you need to change the file: <em>&lt;INSTALL

Configuraciones válidas para autenticación en AD utilizando el Protocolo LDAP (Lightweight Directory Access Protocol).

...

_FLUIG>\jboss\configuration\standalone.

...

Busque el siguiente fragmento:

Bloco de código

theme	Eclipse
language	javascript

<securityxml</em>.
	</p>
	<p>&#160;</p>
	<p>Look for the following string:</p>
	<div class="code panel pdl" style="border-width: 1px;">
		<div class="codeContent panelContent pdl">
			<pre class="theme: Eclipse; brush: javascript; gutter: false"
				style="font-size: 12px;">&lt;security-domain name="TOTVSTech" cache-type="default">
 <authentication>&lt;authentication>
 <login&lt;login-module code="com.totvs.foundation.auth.FoundationDatabaseServerLoginModule" flag="required" module="com.totvs.foundation.auth">
 <module&lt;module-option name="hashAlgorithm" value="MD5"/>
 <module&lt;module-option name="hashEncoding" value="HEX"/>
 <module&lt;module-option name="principalClass" value="com.totvs.technology.foundation.common.TOTVSTechPrincipal"/>
 <&lt;/login-module>
 <&lt;/authentication>
</security-domain>

En el caso que se utilice la forma de validación directa, sin necesidad credencial, sustituya por el siguiente fragmento:

Bloco de código

theme	Eclipse
language	javascript

<security&lt;/security-domain></pre>
		</div>
	</div>
	<p>&#160;</p>
	<p>If you use the direct validation form, without the need for
		credential, replace it for the following string:</p>
	<div class="code panel pdl" style="border-width: 1px;">
		<div class="codeContent panelContent pdl">
			<pre class="theme: Eclipse; brush: javascript; gutter: false"
				style="font-size: 12px;">&lt;security-domain name="TOTVSTech" cache-type="default">
 <authentication>&lt;authentication>
  <login&lt;login-module code="com.totvs.foundation.auth.FoundationLdapLoginModule" flag="required" module="com.totvs.foundation.auth">
    <module&lt;module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
    <module&lt;module-option name="java.naming.provider.url" value="ldap://<SERVIDOR>:<PORTA>&lt;SERVIDOR>:&lt;PORTA>/"/>
    <module&lt;module-option name="java.naming.security.authentication" value="simple"/>
    <module&lt;module-option name="java.naming.security.protocol" value=""/>
    <module&lt;module-option name="uidAttributeID" value="sAMAccountName"/>
    <module&lt;module-option name="principalDNSuffix" value="@<DOMINIO>@&lt;DOMINIO>"/>
    <module&lt;module-option name="rolesCtxDN" value="DC=local"/>
    <module&lt;module-option name="loginCombinedWithDatabase" value="false"/>
    <module&lt;module-option name="hashAlgorithm" value="MD5"/>
    <module&lt;module-option name="hashEncoding" value="HEX"/>
    <module-option name="principalClass" value="com.totvs.technology.foundation.common.TOTVSTechPrincipal"/>
   </login-module>
 </authentication>
</security-domain>

Sugerencia: En el caso que opte por utilizar el login "combinado", es decir, login/contraseña de la red E del banco de datos, modifique el valor de la propiedad loginCombinedWithDatabase para "true".

En el caso que se utilice el LDAP con necesidad de credencial, sustituya por el siguiente fragmento:

Bloco de código

theme	Eclipse
language	javascript

<security&lt;/login-module>
 &lt;/authentication>
&lt;/security-domain></pre>
		</div>
	</div>
	<p>
		<em style="line-height: 1.4285715;"><em><strong>Tip:</strong>&#160;If
				you choose to use a "combined" login, i.e. login/network AND
				database password, change the value of the&#160;<em><em>loginCombinedWithDatabase
						property to "true".</em></em></em></em>
	</p>
	<p>
		<em><em><br /></em></em>
	</p>
	<p>
		<em><em><br /></em></em>
	</p>
	<p>If you use LDAP with the need for credential, replace it with
		the following string:</p>
	<div class="code panel pdl" style="border-width: 1px;">
		<div class="codeContent panelContent pdl">
			<pre class="theme: Eclipse; brush: javascript; gutter: false"
				style="font-size: 12px;">&lt;security-domain name="TOTVSTech" cache-type="default">
<authentication>
<login&lt;authentication>
&lt;login-module code="com.totvs.foundation.auth.FoundationExtLdapLoginModule" flag="required" module="com.totvs.foundation.auth">
<module&lt;module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
        <module&lt;module-option name="java.naming.provider.url" value="ldap://<SERVIDOR>:<PORTA>&lt;SERVIDOR>:&lt;PORTA>/"/> 
        <module&lt;module-option name="java.naming.security.authentication" value="simple"/> 
        <module&lt;module-option name="java.naming.security.protocol" value=""/> 
        <module&lt;module-option name="java.naming.security.principal" value="<USUARIO>@<DOMINIO>&lt;USUARIO>@&lt;DOMINIO>"/> 
        <module&lt;module-option name="java.naming.security.credentials" value="<SENHA>&lt;SENHA>"/> 
        <module&lt;module-option name="uidAttributeID" value="sAMAccountName"/> 
        <module&lt;module-option name="baseFilter" value="(sAMAccountName={0})"/> 
        <module&lt;module-option name="loginCombinedWithDatabase" value="false"/> 
        <module&lt;module-option name="baseCtxDN" value="DC=<ESTRUTURA>&lt;ESTRUTURA>"/> 
        <module&lt;module-option name="rolesCtxDN" value="DC=<ESTRUTURA>&lt;ESTRUTURA>"/> 
        <module&lt;module-option name="hashAlgorithm" value="MD5"/> 
        <module&lt;module-option name="hashEncoding" value="HEX"/> 
        <module-option name="principalClass" value="com.totvs.technology.foundation.common.TOTVSTechPrincipal"/>
        </login-module> 
   </authentication> 
</security-domain>

...

&lt;/login-module> 
   &lt;/authentication> 
&lt;/security-domain></pre>
		</div>
	</div>
	<p>
		<strong>Tip:</strong><span>&#160;If you choose to use a
			"combined" login, i.e. login/network AND database password, change
			the value of the&#160;</span><em><em>loginCombinedWithDatabase
				property to "true".</em></em>
	</p>
	<p>
		<em><em><br /></em></em>
	</p>
	<p>
		<em><em><br /></em></em>
	</p>
</div>

Árvore de páginas

Versões comparadas

Versão antiga 1

Nova versão 2

Chave