[KARAF-3052] Allow passing through custom ldap properties

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.4.0, 3.0.2, 2.3.6, 4.0.0.M2, 4.0.0.M3
• Component/s: karaf
• Assignee: Guillaume Nodet
• Reporter: Iulius Hutuleac
• Created: 17/Jun/14 08:44
• Updated: 15/Sep/18 05:45
• Resolved: 16/Jul/14 13:28

Description

When we setup the user/group base location all queries are failing if we are at base of the DC.

As a workaround we could set follow referrals property to "follow" but this is not supported at the moment using the standard config file.

Using the modified source as described in the attached file and a config file entry this would become feasible.

org.apache.activemq.jaas.LDAPLoginModule optional
debug=true
initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory
connectionURL="ldap://test.local:389"
connectionUsername="CN=testusr,DC=test,DC=local"
connectionPassword="XXXXXXXXXX"
connectionProtocol="s"
authentication=simple
userBase="DC=test,DC=local"
userSearchSubtree=true
userRoleName=sAMAccountName
userSearchMatching="(sAMAccountName=

{0}

)"
roleBase="DC=test,DC=local"
roleName=cn
roleSearchMatching="(member:=uid=

{1}

)"
java.naming.referral=follow
roleSearchSubtree=true;
};