Approval for creating users in an organization

Question

Hi,
We have a requirement where approval is required for creating users in Organisation X. Also, the admin has to fill in a field SSN before approving the request. We have implemented this by changing the approval form. But the admin can still approve by selecting it from the approval list directly (without viewing the form), where he wouldn't be prompted for SSN. Is there any way to avoid this so that admin has to provide SSN before approving?
Thanks,
Teena

Answer 1

Hi Jason,
The WebLogic LDAP realm implementations (both -- V1 and V2) have only read access on your LDAP server.
You are recommended to use your LDAP server's own management tools to create groups and users on the LDAP server.
Joe Jerry
Jason Howard wrote:
Hi,
I am trying to determine whether or not it is possible to create users in an LDAP
Realm.
The documentation makes it clear that it is not currently possible with LDAPRealm
V2, but it is ambiguous as to whether it can be done with LDAPRealmV1.
My attempts to do this have been met with the following runtime exception:
Servlet failed with Exception
java.lang.UnsupportedOperationException: group modification not supported at weblogic.security.acl.DefaultGroupImpl.addMember(DefaultGroupImpl.java:39)
The method addMember is being called on an implementation of the interface Group.
This Group object is being returned without exceptions from the method getGroup(java.lang.String
name) from an instance of weblogic.security.acl.CachingRealm
The instance of CachingRealm is caching the LDAPRealm V1 pointing at an iPlanet server.
NOTE: I can confirm that the configuration of the LDAP Realm is correct because I
can see the users and groups contained within from the weblogic console.
Can anyone confirm one way or the another, whether LDAPRealmV1 supports the ability
to create users and add them to groups.
Regards
Jason