topic Steps for integrate Activiti with LDAP in Alfresco Archive

Steps for integrate Activiti with LDAP

jcosano — Tue, 07 Jun 2011 09:59:37 GMT

Hello…I would explain how I use Activiviti with my corporative LDAP. Maybe this is not the best way, but for me is working and it would be a start point for others…First of all, I choose a framework for work with LDAP, I consider these:- jndi- spring ldap- UnboundID LDAP SDK- Novell ldap frameworkFi

Re: Steps for integrate Activiti with LDAP

marcinj — Thu, 09 Jun 2011 12:21:10 GMT

Hi jcosano,

I was very happy to see your post, as I'm about to face a similar issue. But it's not enirely clear for me how it works :

1. There's a variable identityService in class LDAPStandaloneProcessEngineConfiguration . I can't find any references to this variable.

2. In the bean processEngineConfiguration (of class org.activiti.engine.impl.cfg.ldap.LDAPStandaloneProcessEngineConfiguration) you set property customSessionFactories. I can't find this property (a setter, or a field) in StandaloneProcessEngineConfiguration .

Maybe you are using a different version of Activiti ? I'm on 5.4

Thanks,
Marcin Jaskolski

Update to 5.6 solves point 2 8-)

Re: Steps for integrate Activiti with LDAP

p4w3l — Thu, 09 Jun 2011 17:37:50 GMT

I use similar way but without 1) and 3). It works fine for me.

Re: Steps for integrate Activiti with LDAP

jcosano — Fri, 10 Jun 2011 07:20:29 GMT

Hi!

marcinj:
1) variable identityService overrides same variables defined in class: ProcessEngineConfigurationImpl
I do this for use my own implementation for this service.
2) customSessionFactories belongs to ProcessEngineConfigurationImpl
note: StandaloneProcessEngineConfiguration extends ProcessEngineConfigurationImpl
I'm using activiti 5.6 but, this configuration I made for activiti 5.3.

p4w3l:
It's true, 1 and 3 is redundant… I don't know if in some case you need change identifyservice for use a particular cmd…

Re: Steps for integrate Activiti with LDAP

mtr3691 — Fri, 29 Jul 2011 21:20:00 GMT

Hi!

marcinj:
1) variable identityService overrides same variables defined in class: ProcessEngineConfigurationImpl
I do this for use my own implementation for this service.
2) customSessionFactories belongs to ProcessEngineConfigurationImpl
note: StandaloneProcessEngineConfiguration extends ProcessEngineConfigurationImpl
I'm using activiti 5.6 but, this configuration I made for activiti 5.3.

p4w3l:
It's true, 1 and 3 is redundant… I don't know if in some case you need change identifyservice for use a particular cmd…

If 3 is not needed, how does login occur? The login method is located in the IdentityService…and will be different for each LDAP schema…correct?
So, why would you not have an IdentityService for every integration with an LDAP service?

Re: Steps for integrate Activiti with LDAP

jcosano — Mon, 01 Aug 2011 05:43:06 GMT

For validate user&password Activiti uses CheckPassword (org.activiti.engine.impl.cmd)

Then, compare password with a user object retrieved with UserManager.

Each particular UserManager known location for password.

For this, you only need implement you own UserManager.

Re: Steps for integrate Activiti with LDAP

mtr3691 — Tue, 02 Aug 2011 20:06:39 GMT

For validate user&password Activiti uses CheckPassword (org.activiti.engine.impl.cmd)

Then, compare password with a user object retrieved with UserManager.

Each particular UserManager known location for password.

For this, you only need implement you own UserManager.

So, I must be missing pieces of this whole integration…(possibly my lack of understanding of Spring among other issues)…

UserManager has no login, so how is a "user object" obtained if the Activiti tool (for example) Explorer does not know what LDAP server to connect to, let alone, what the query is to retrieve an object from the LDAP repository?

I believe, I understand correctly the Activiti Engine can be instantiated within another application thus providing the ability to write custom code, in the host application, to communicate to an LDAP repository…but how do you wire all the tools to use LDAP as well??

I have a Spring LDAP client, which can connect and verify a user to an LDAP resource. That client has 2 classes it uses UserManager and GroupManager, which I believe I can use (in the context of the previous responses within this thread) to override Activiti so it can query LDAP. But how does Activiti, connect to LDAP without an IdentityService containing the specifics for the LDAP connection?

Is there anyone who has a working installation of Activiti and tools (Explorer/Probe/etc) which are using LDAP as authentication/authorization? If so, is there anyway someone can give me a tour of it so I can grasp what I am missing?

Thanks….

Re: Steps for integrate Activiti with LDAP

mokematt — Tue, 19 Feb 2013 11:19:53 GMT

Hi,

I'm using activiti 5.11 and tried the way described above without 1) and 3). I want to store the identity data in an openLdap and the other data in an Oracle 11g Database.

I got the following exception:

Feb 19, 2013 11:50:14 AM org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
INFO: Loading XML bean definitions from resource loaded through InputStream
SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
SLF4J: Defaulting to no-operation (NOP) logger implementation
SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
Feb 19, 2013 11:50:17 AM org.activiti.engine.impl.interceptor.CommandContext close
SEVERE: Error while closing command context
org.activiti.engine.ActivitiException: Activiti database problem: Tables missing for component(s) identity

My Activiti.cfg.xml looks like this:


<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">

 <bean id="processEngineConfiguration"
  class="org.activiti.engine.impl.cfg.StandaloneProcessEngineConfiguration">
  <property name="databaseSchemaUpdate" value="false" />
  <property name="jdbcUrl" value="jdbc:smileysurprised:racle:thin:@0.0.0.0:1521/OracleSchema" />
  <property name="jdbcDriver" value="oracle.jdbc.driver.OracleDriver" />
  <property name="jdbcUsername" value="user" />
  <property name="jdbcPassword" value="secret" />
  <property name="databaseType" value="oracle" />
  <property name="jobExecutorActivate" value="true" />
  <property name="history" value="full" />
  <property name=”customSessionFactories”>
   <list>
    <bean class=”pucco.activiti.LDAPUserManagerFactory”>
     <constructor-arg ref=”ldapConnectionParams” />
    </bean>
    <bean class=”pucco.activiti.LDAPGroupManagerFactory”>
     <constructor-arg ref=”ldapConnectionParams” />
    </bean>
   </list>
  </property>
 </bean>
 <bean id="ldapConnectionParams" class="pucco.activiti.LDAPConnectionParams">
  <property name="ldapServer" value="0.0.0.0" />
  <property name="ldapPort" value="389" />
  <property name="ldapUser" value="cn=user,o=system" />
  <property name="ldapPassword" value="secret" />
 </bean>
</beans>

Hint: I used this for creating my Factory classes: http://aganeshreddy.wordpress.com/2012/10/17/managing-user-identity-using-custom-ldap-in-activiti-engine/

It seems like, that the Activiti Engine doesn't understand that it has to use the Factory classes for the IdentityService. The database Schema includes all Tabels except the identity.

Any ideas to solve the problem?

best regards

Re: Steps for integrate Activiti with LDAP

p4w3l — Tue, 19 Feb 2013 21:32:47 GMT

The database Schema includes all Tabels except the identity.

Why you touch Activiti db schema?

Re: Steps for integrate Activiti with LDAP

jbarrez — Wed, 20 Feb 2013 11:56:39 GMT

It seems like, that the Activiti Engine doesn't understand that it has to use the Factory classes for the IdentityService

What do you mean with that? It doesn't get picked up?

Why you touch Activiti db schema?

The identity tables can be dropped if you aren't using them.

Re: Steps for integrate Activiti with LDAP

mokematt — Mon, 25 Feb 2013 09:29:20 GMT

The database Schema includes all Tabels except the identity.

Why you touch Activiti db schema?

I want to store the identity data(username, password, permission) in the LDAP and store every other data in the Oracle Database.

Edit: I think i found the problem. Activiti only added the GroupManagerFactory and the UserManagerFactory, so the IdentityService got two Factories and used the first one. That was the default factory.
I implemented my own ProcessEngineConfiguration and replaced the User and Group SessionFactories with my LDAP factories. Now it seems to work as it should.
I have to do some further tests, but here is my ProcessEngineConfiguration:

package pucco.activiti;

import java.util.Map;

import org.activiti.engine.IdentityService;
import org.activiti.engine.ProcessEngine;
import org.activiti.engine.impl.ProcessEngineImpl;
import org.activiti.engine.impl.cfg.StandaloneProcessEngineConfiguration;
import org.activiti.engine.impl.interceptor.SessionFactory;
import org.activiti.engine.impl.persistence.entity.GroupManager;
import org.activiti.engine.impl.persistence.entity.UserManager;

public class CustomProcessEngineConfiguration extends StandaloneProcessEngineConfiguration {
 protected IdentityService identityService;
 private LDAPConnectionParams connectionParams;
 
 public CustomProcessEngineConfiguration(LDAPConnectionParams connectionParams){
  this.connectionParams = connectionParams;
 }
 
 public ProcessEngine buildProcessEngine() {
  this.setIdentityService(new IdentityServiceLDAPImpl(connectionParams));
  init();
  Map<Class< ? >, SessionFactory> sessionFactories = this.getSessionFactories();
  sessionFactories.put(GroupManager.class, new LDAPGroupManagerFactory(connectionParams));
  sessionFactories.put(UserManager.class, new LDAPUserManagerFactory(connectionParams));
  this.setSessionFactories(sessionFactories);
     return new ProcessEngineImpl(this);
   }
}

Edit2: Now the processEngine works as it should. All method calls of IdentityService will result in a connection to the LDAP directory. The loss of the ACT_ID_* tables in the database is also no longer relevant.

Re: Steps for integrate Activiti with LDAP

mokematt — Tue, 19 Mar 2013 14:16:38 GMT

I implemented an custom ProcessEngineConfiguration to solve my Problem.


public class CustomProcessEngineConfiguration extends StandaloneProcessEngineConfiguration {
 protected IdentityService identityService;
 private LDAPConnectionParams connectionParams;
 
 public CustomProcessEngineConfiguration(LDAPConnectionParams connectionParams){
  this.connectionParams = connectionParams;
 }
 
 public ProcessEngine buildProcessEngine() {
  init();
  Map<Class< ? >, SessionFactory> sessionFactories = this.getSessionFactories();
  sessionFactories.put(GroupManager.class, new LDAPGroupManagerFactory(connectionParams));
  sessionFactories.put(UserManager.class, new LDAPUserManagerFactory(connectionParams));
  this.setSessionFactories(sessionFactories);
  return new ProcessEngineImpl(this);
   }
}

greets
mokematt

Re: Steps for integrate Activiti with LDAP

sdwilly22 — Thu, 18 Jul 2013 17:52:42 GMT

This example is from an older version of Activiti. UserManager has been changed to UserEntityManager. GroupManager has been changed to GroupEntityManager. Does anyone have an example of this working with version 5.12 or 5.13?

Re: Steps for integrate Activiti with LDAP

frederikherema1 — Fri, 19 Jul 2013 06:25:43 GMT

5.13 comes with LDAP-support OOTB, you can use this or use the implementation as a base…

Re: Steps for integrate Activiti with LDAP

sdwilly22 — Tue, 23 Jul 2013 11:50:27 GMT

This post helped me to solve my problem of integration with 5.13. I will put it here in case anyone else is looking for the same information. http://forums.activiti.org/content/customsessionfactories-activiti-513#comment-18496

Re: Steps for integrate Activiti with LDAP

rajannavagare — Wed, 16 Mar 2016 08:54:32 GMT

i'm trying to integrate ldap with activiti.

my activiti-custom-context.xml file is as folllows:

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:context="http://www.springframework.org/schema/context" xmlns:tx="http://www.springframework.org/schema/tx"
xmlns:jee="http://www.springframework.org/schema/jee" xmlns:aop="http://www.springframework.org/schema/aop"
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
       http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd
       http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd
       http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.0.xsd
       http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd">

<!– <bean id="dbProperties" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
      <property name="location" value="classpath:db.properties" />
      <property name="ignoreUnresolvablePlaceholders" value="true" />
   </bean>

   <bean id="dataSource" class="org.apache.commons.dbcp.BasicDataSource">
      <property name="driverClassName" value="${jdbc.driver}" />
      <property name="url" value="${jdbc.url}" />
      <property name="username" value="${jdbc.username}" />
      <property name="password" value="${jdbc.password}" />
      <property name="defaultAutoCommit" value="false" />
   </bean> –>

   <!–<bean id="transactionManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
    <property name="dataSource" ref="dataSource" />
   </bean>–><!– <!–

   <bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration">
    <property name="dataSource" ref="dataSource" />
    <property name="transactionManager" ref="transactionManager" />
    <property name="databaseSchemaUpdate" value="true" />
         <property name="enableDatabaseEventLogging" value="true" />
    <property name="jobExecutorActivate" value="false" />
    <property name="asyncExecutorEnabled" value="true" />
    <property name="asyncExecutorActivate" value="true" />

         <property name="customFormTypes">
           <list>
              <bean class="org.activiti.explorer.form.UserFormType" />
              <bean class="org.activiti.explorer.form.ProcessDefinitionFormType" />
              <bean class="org.activiti.explorer.form.MonthFormType" />
           </list>
         </property>

<property name="mailServerHost" value="mail.lodhagroup.com" />
<property name="mailServerPort" value="25" />
<property name="mailServerUseSSL" value="false" />
<property name="mailServerUseTLS" value="true" />
<property name="mailServerDefaultFrom" value="processmaster@lodhagroup.com" />
<property name="mailServerUsername" value="lodha_email@lodhagroup.com" />
<property name="mailServerPassword" value="welcome@123" />
   </bean> –> –>

   <bean id="processEngine" class="org.activiti.spring.ProcessEngineFactoryBean" destroy-method="destroy">
    <property name="processEngineConfiguration" ref="processEngineConfiguration" />
   </bean>

   <bean id="repositoryService" factory-bean="processEngine" factory-method="getRepositoryService" />
   <bean id="runtimeService" factory-bean="processEngine" factory-method="getRuntimeService" />
   <bean id="taskService" factory-bean="processEngine" factory-method="getTaskService" />
   <bean id="formService" factory-bean="processEngine" factory-method="getFormService" />
   <bean id="historyService" factory-bean="processEngine" factory-method="getHistoryService" />
   <bean id="managementService" factory-bean="processEngine" factory-method="getManagementService" />
   <bean id="identityService" factory-bean="processEngine" factory-method="getIdentityService" />

<bean id="processEngineConfiguration" class="org.activiti.engine.impl.cfg.ldap.LDAPStandaloneProcessEngineConfiguration">
     <!– <property name="customSessionFactories">
        <list>
   <bean class="org.activiti.engine.impl.ldap.LDAPUserManagerFactory" />
            <bean class="org.activiti.engine.impl.ldap.LDAPGroupManagerFactory" />
        </list>
    </property> –>

<property name="configurators">
          <list>
              <bean class="org.activiti.ldap.LDAPConfigurator">

                <!– Server connection params –>
                <property name="server" value="ldap://192.168.12.25" />
                <property name="port" value="389" />
                <property name="user" value="cn=Manager,dc=lodhagroup,dc=com" />
                <property name="password" value="*******" />

                <!– Query params –>
                <property name="baseDn" value="o=People" />
                <property name="queryUserByUserId" value="(&(objectClass=inetOrgPerson)(uid={0}))" />
                <property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
                <property name="queryGroupsForUser" value="(&(objectClass=groupOfUniqueNames)(uniqueMember={0}))" />

                <!– Attribute config –>
                 <property name="userIdAttribute" value="uid" />
                <property name="userFirstNameAttribute" value="cn" />
                <property name="userLastNameAttribute" value="sn" />S
                <property name="userEmailAttribute" value="mail" />

                <property name="groupIdAttribute" value="cn" />
                <property name="groupNameAttribute" value="cn" />

              </bean>
          </list>
        </property>

</bean>

</beans>

when i made changes in XML file i'm unable to start Activiti.
error says could not start Activiti explorer.

Re: Steps for integrate Activiti with LDAP

rajannavagare — Wed, 16 Mar 2016 11:56:56 GMT

<bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration">
</bean>
including this in activiti-custom-context.xml
stopping my activiti from running.
it says activiti could not start.

Re: Steps for integrate Activiti with LDAP

jbarrez — Fri, 18 Mar 2016 13:43:00 GMT

We would need more info … stacktraces, errors …to be able to answer your question.