javaee, Weblogic, LDAP authenticator

Question

I configure a LDAP authenticator with WebLogic as follows: Weblogic console -> security realms -> myrealm -> providers -> new -> type: ActiveDirectoryAuthenticator... and set User Name Attribute = sAMAccountName. then, my application gets the sAMAccountName of the authenticated user by calling httpServletRequest.getUserPrincipal.getName().

however, this returns just the string (the sAMAccountName). Is it possible to get the complete LDAP account of the authenticated user (javax.naming.directory.SearchResult, or similar) directly from httpServletRequest?

ps: I am aware that I could use an extra LDAP query based on sAMAccountName to get the complete LDAP account of the user, but this would require an unnecessary second LDAP query, and also to replicate the LDAP configuration from Weblogic into my application.

Billy Bob Bain · Accepted Answer · 2012-04-20 11:50:05Z

1

You can use the OPSS User & Role APIs. They will work with Active Directory.

http://docs.oracle.com/cd/E12839_01/core.1111/e10043/devuserole.htm#BABBIGAJ

You can query the identity store directly for a specific user or role using the searchUser and searchRole APIs:

IdentityStore.searchUser(String name);

IdentityStore.searchUser(Principal principal);

answered Apr 20, 2012 at 11:50

Billy Bob Bain

2,89518 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

javaee, Weblogic, LDAP authenticator

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related