使用Ldap对Glassfish进行基本身份验证

Question

I´m developping a Web Service. Currently, I´m using Basic Authentication using a file to manage users.

Now I want to use Basic authentication, integrate LDAP server. I installed and I create a LDAP server, using LDAP - Apache Directory Studio.

In Glassfish console I create a new ldapRealm.

My web.xml has this code:

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>LDAP</realm-name>
</login-config>

Now I want to specify different roles for different ldap group of users.

How can I achieve this? There is any tutorial for this prupose for Web Services?

There is possiblity to add an annotation specifing roles like @RolesAllowed(LDAP Group) to different methods?

Answer 1

In order to configure the realm in Glassfish look To Create an LDAP Realm in the GlassFish Server .

Regarding Apache Directory Studio, see Let's create an LDAP user and search for him . You may want to see Setting up an LDAP directory server for Alfresco development .