LDAP authentication(...authorization)

[mtr3691]

Can I use Spring Security to implement LDAP authentication via adding spring entries into the "activiti.cfg.xml"?

I am working on configuring Activiti to use LDAP for authentication and am a little confused as to whether I can accomplish that by just configuring an XML file or do I have to write code (Java)…then configure via the activiti.cfg.xml file…

Do the users/groups have to be replicated in Activiti from LDAP?

Thanks.

[ronald_van_kuij]

I assume you have not searched this forum, correct? The reason I ask this is that there is info on this subject in this area and you do not reference any of the posts.

[mtr3691]

I have searched the forum…and I have learned many things. However, I am not an Activiti nor a Spring expert (working towards that goal), while what I read makes sense, at times, am having difficulty applying the information due to my lack of Spring expertise (relatively new to Java as well). I am trying to establish a few basics contsructs, first can an integration between Activiti and an LDAP service be accomplished (for authentication) without writing any code…XML configuration only.

Secondly, for authorization, can the integration between Activiti and LDAP server be accomplished in XML configuration only?

I may be missing something all together or have an incorrect perception of what I have seen, either way, I am looking for some guidance on whether my pursuit track is appropriate or not…thanks.

[ronald_van_kuij]

see Private message…

[mtr3691]

I have searched the forum…and I have learned many things. However, I am not an Activiti nor a Spring expert (working towards that goal), while what I read makes sense, at times, am having difficulty applying the information due to my lack of Spring expertise (relatively new to Java as well). I am trying to establish a few basics contsructs, first can an integration between Activiti and an LDAP service be accomplished (for authentication) without writing any code…XML configuration only.

Secondly, for authorization, can the integration between Activiti and LDAP server be accomplished in XML configuration only?

I may be missing something all together or have an incorrect perception of what I have seen, either way, I am looking for some guidance on whether my pursuit track is appropriate or not…thanks.

It is my understanding…LDAP integration can not be accomplished by XML configuration alone (via the Activiti.cfg.xml file), specifically authentication. I will reread/research the posts to see if they make more sense to me now…without a working sample of LDAP integration, it is difficult to understand without a good working basis of Activiti, Spring, at least.

For those who have a working Activiti/LDAP integration, are you syncing users/groups with the Activiti DB?

[p4w3l]

http://forums.activiti.org/en/viewtopic.php?f=6&t=1800&start=0&hilit=ldap

It is not replication. It plugs LDAP into Activiti. The authentication will work in 5.7 or with current TRUNK that requires build but it is easy - check user manual or WIKI - I don't remember.

All above guarantees that you can log into explorer in case the user belongs to one of the LDAP group: user, manager, admin

[mtr3691]

http://forums.activiti.org/en/viewtopic.php?f=6&t=1800&start=0&hilit=ldap

It is not replication. It plugs LDAP into Activiti. The authentication will work in 5.7 or with current TRUNK that requires build but it is easy - check user manual or WIKI - I don't remember.

All above guarantees that you can log into explorer in case the user belongs to one of the LDAP group: user, manager, admin

Do the classes for LDAP integration have to be "built" with Activiti or can they be used without re-building Activiti (via XML Configuration file/Spring)?