Re: [jetty-users] JAAS LdapLoginModule - mapping groups to roles

[Jan Bartel <janb@xxxxxxxxxxx>]

Hi Samuel,

You can map the role names for a given <servlet> in  web.xml using the <security-role-ref><role-name><role-link>.  So if your ldap group is "manager" but you want to do request.isUserInRole("admin") you would declare <security-role-ref><role-name>admin</role-name><role-link>manager</role-link></security-role-ref>.

Or are you looking for a way to configure this for all servlets, or looking for a way to configure this external to the web.xml?

Jan

On 24 November 2016 at 21:48, Samuel Martinucci <samuelmartinucci@xxxxxxxxx> wrote:

Hi,

I've found the following email thread and I am currently facing the same problem, does anyone know if it was solved some way?

https://dev.eclipse.org/mhonarc/lists/jetty-users/msg07063.html

I've tried with sun-web.xml without success and I am starting to share the same thought that I will need to subclass LdapLoginModule, even though I imagine that there might exist a solution for this.

Best regards.

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

--

Jan Bartel <janb@xxxxxxxxxxx>

www.webtide.com
Expert assistance from the creators of Jetty and CometD