ProcessEngineConfiguration + LdapAdapter

desperado — Fri, 12 Apr 2013 20:21:10 GMT

Hello Activiti Community,i just want to introduce myself before asking for any help.About me:———-My name is Michael and i am c programmer ( shame on me 🙂 ).So i'm new to the java world. Although i can follow object oriented languages like c#,c++ and java, but i will have to spend a lot of time to

Re: ProcessEngineConfiguration + LdapAdapter

desperado — Sun, 14 Apr 2013 22:19:13 GMT

Hello,

"finally" it was very simple, not to say trivial. ( after removing some issues with my browsers, library usage and some dozens combined minor things ).
Even if this will not be a new topic to you, i want to post a simple entry point to get started for others. I stripped it completely down to the really
needed stuff (nothing else, so far…)

Files:

* Java: Factory Class
* Java: UserEntityManager Child Class
* Java: LdapSetting Datastructure
* Java: LdapAdapter
* Configuration File: db.properties
* Configuration File: activiti-standalone-context.xml


//******************************************************************************
//* Author: Michael Hoffmann
//* Date  : 14.04.2013
//* File  : LdapUserManagerFactory.java
//******************************************************************************

package ldap;

//******************************************************************************
//* Dependencies
//******************************************************************************

import org.activiti.engine.impl.interceptor.Session;
import org.activiti.engine.impl.interceptor.SessionFactory;
import org.activiti.engine.impl.persistence.entity.UserEntityManager;

//******************************************************************************
//* Class Definition
//******************************************************************************

public class LdapUserManagerFactory implements SessionFactory {

    //————————————————————————–
    // Member
    //————————————————————————–
 
 private LdapSetting ldapSetting;
 
 LdapUserManagerFactory(LdapSetting ldapSetting)
 { this.ldapSetting = ldapSetting; }
 
    //————————————————————————–
    // Interface
    //————————————————————————–
 
 @Override
 public Class<?> getSessionType() 
 { return UserEntityManager.class; }

 @Override
 public Session openSession() 
 { return new LdapUserManager(ldapSetting); }

}


//******************************************************************************
//* Author: Michael Hoffmann
//* Date  : 14.04.2013
//* File  : LdapUserManager.java
//******************************************************************************

package ldap;

//******************************************************************************
//* Dependencies
//******************************************************************************

import java.util.logging.Level;
import java.util.logging.Logger;
import javax.naming.NamingException;
import org.activiti.engine.impl.persistence.entity.UserEntityManager;

//******************************************************************************
//* Class Definition
//******************************************************************************

public class LdapUserManager extends UserEntityManager {

    //————————————————————————–
    // Member
    //————————————————————————–
 
    private static final Logger LOGGER = 
    Logger.getLogger(LdapUserManager.class.getName());
    
    private LdapSetting ldapSetting;
    private LdapAdapter ldapAdapter;
    
    //————————————————————————–
    // Ctor
    //————————————————————————–
    
    public LdapUserManager(LdapSetting ldapSetting)
    { 
      this.ldapSetting = ldapSetting;
      this.ldapAdapter = new LdapAdapter();
    }

    //————————————————————————–
    // Inheritance
    //————————————————————————–
    
    @Override
    public Boolean checkPassword(String userId, String password) {
        
        LOGGER.log(Level.INFO,"checking password…");
        String uid = "cn=" + userId +",ou=users,ou=system";
        
        try {
            
            ldapSetting.setSecurityPrincipal(uid);
            ldapSetting.setSecurityCredential(password);
            
            if(ldapAdapter.authenticate(ldapSetting))
            {
             ldapAdapter.close();
             LOGGER.log(Level.INFO,"LDAP authentication successful: " + uid);
             return true;
            }
        } 
        catch (NamingException e) 
        { e.printStackTrace(); }
       
        LOGGER.log(Level.INFO,"LDAP authentication failed: " + uid);
        return Boolean.FALSE;
    }
}


//******************************************************************************
//* Author: Michael Hoffmann
//* Date  : 14.04.2013
//* File  : LdapSetting.java
//******************************************************************************

package ldap;

//******************************************************************************
//* Dependencies
//******************************************************************************

// …

//******************************************************************************
//* Class Definition
//******************************************************************************

public class LdapSetting {

    //————————————————————————–
    // Member
    //————————————————————————–
    
    private String ldapUrl;
    private String ldapPort;
    private String securityAuthentication;
    private String securityCredential;
    private String securityPrincipal;
    
    //————————————————————————–
    // Getter
    //————————————————————————–
    
    public String getLdapUrl() 
    { return ldapUrl; }
    
    public String getLdapPort() 
    { return ldapPort; }

    public String getSecurityAuthentication() 
    { return securityAuthentication; }
    
    public String getSecurityCredential() 
    { return securityCredential; }
    
    public String getSecurityPrincipal() 
    { return securityPrincipal; }

    //————————————————————————–
    // Setter
    //————————————————————————–
    
    public void setLdapUrl(String ldapUrl) 
    { this.ldapUrl = ldapUrl; }
    
    public void setLdapPort(String ldapPort) 
    { this.ldapPort = ldapPort; }

    public void setSecurityAuthentication(String securityAuthentication) 
    { this.securityAuthentication = securityAuthentication; }
    
    public void setSecurityCredential(String securityCredential) 
    { this.securityCredential = securityCredential; }
    
    public void setSecurityPrincipal(String securityPrincipal) 
    { this.securityPrincipal = securityPrincipal; }
    
    // Additional Getter
    public String getProviderUrl()
    { return ldapUrl + ":" + ldapPort; }
    
}


//******************************************************************************
//* Author: Michael Hoffmann
//* Date  : 14.04.2013
//* File  : LdapAdapter.java
//******************************************************************************

package ldap;

//******************************************************************************
//* Dependencies
//******************************************************************************

import java.util.Hashtable;
import java.util.logging.Level;
import java.util.logging.Logger;

import javax.naming.Context;
import javax.naming.InitialContext;
import javax.naming.NamingException;

//******************************************************************************
//* Class Definition
//******************************************************************************

public class LdapAdapter {

    //————————————————————————–
    // Member
    //————————————————————————–
    
    private final static String FACTORY =
    "com.sun.jndi.ldap.LdapCtxFactory";
    
    private static final Logger LOGGER = 
    Logger.getLogger(LdapAdapter.class.getName());
    
    private Context context;
    
    //————————————————————————–
    // Ldap
    //————————————————————————–
    
    public boolean authenticate(LdapSetting ldapSetting) throws NamingException
    {
        LOGGER.log(Level.INFO,"try to connect");
        Hashtable<String, String> env = new Hashtable<String, String>();
        env.put(Context.INITIAL_CONTEXT_FACTORY,FACTORY);
        env.put(Context.PROVIDER_URL,ldapSetting.getProviderUrl());
        env.put(Context.SECURITY_AUTHENTICATION,ldapSetting.getSecurityAuthentication());
        env.put(Context.SECURITY_PRINCIPAL,ldapSetting.getSecurityPrincipal());
        env.put(Context.SECURITY_CREDENTIALS,ldapSetting.getSecurityCredential());

        context    = new InitialContext(env);
        LOGGER.log(Level.INFO,"connected");
        return context != null;
    }
    
    public void close() throws NamingException
    {
        context.close();
        LOGGER.log(Level.INFO,"connection closed");
    }
}


 
  Snippet: activiti-standalone-context.xml
  …

  <bean id="processEngineConfiguration" class="org.activiti.spring.SpringProcessEngineConfiguration">
   <property name="dataSource" ref="dataSource" />
   <property name="transactionManager" ref="transactionManager" />
   <property name="databaseSchemaUpdate" value="true" />
   <property name="jobExecutorActivate" value="true" />
    <property name="customFormTypes">
      <list>
        <bean class="org.activiti.explorer.form.UserFormType"/>
        <bean class="org.activiti.explorer.form.ProcessDefinitionFormType"/> 
        <bean class="org.activiti.explorer.form.MonthFormType"/>   
      </list>
    </property>
 
 <property name="customSessionFactories">
      <list>
        <bean class="ldap.LdapUserManagerFactory">
          <constructor-arg ref="LdapSettingBean" />
        </bean>
            </list>
    </property>
 
  </bean>
  
  <bean id="LdapSettingBean" class="ldap.LdapSetting">
    <property name="ldapUrl" value="ldap://localhost" />
    <property name="ldapPort" value="10389" />
    <property name="securityAuthentication" value="simple" />
  </bean> 

  …

File: db.properties


db=postgresql
jdbc.driver=org.postgresql.Driver
jdbc.url=jdbc:smileytongue:ostgresql://localhost:5432/activiti
jdbc.username=postgres
jdbc.password=admin

As already mentioned, this is just an entry point to start supporting features of the Activiti Engine with Ldap-Context.

Michael

Re: ProcessEngineConfiguration + LdapAdapter

jbarrez — Mon, 15 Apr 2013 09:54:38 GMT

Thanks for posting back on your own questions, much appreciated!

Re: ProcessEngineConfiguration + LdapAdapter

sarkar92 — Fri, 19 Apr 2013 06:45:09 GMT

Thanks for your valuable information.
I tried this solution in activiti 5.12 The method "CheckPassword" return true but user not Getting in his page. After "checkPassword" retur true its authenticated with LDAP but not logged-In

Re: ProcessEngineConfiguration + LdapAdapter

desperado — Fri, 19 Apr 2013 07:10:57 GMT

Well, if i understand correctly what you mean you should check out the following:

DB and LDAP must be synchonized, that means with the given source above the user must exist also in the database.
The Activiti Engine (AE) will do more operations like "findUserById" and other stuff which is not implemented.
Because of that the AE will search the authenticated user in its DB, where it may not find it, so the loggin fails. So, if you use a test database, just add your "testUser", then after the authentication the AE will loggin with that user.

Michael

Re: ProcessEngineConfiguration + LdapAdapter

sarkar92 — Fri, 19 Apr 2013 07:50:26 GMT

Thanks

Re: ProcessEngineConfiguration + LdapAdapter

sanghaviamit — Wed, 14 Aug 2013 10:06:57 GMT

Hi Michael,

I am new to Activiti BPM and am trying to integrate Activiti with ADS but only through activiti-standalone-context.xml configuration.

From your above post, Do you mean that every time I create a user in LDAP, I need to manually create new entry for user in the act_id_user table as well?

Thanks & Regards,
Amit

topic Re: ProcessEngineConfiguration + LdapAdapter in Alfresco Archive

ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter

Re: ProcessEngineConfiguration + LdapAdapter