My own Realm instead of Custom Realm extends IASRealm ?

Question

I understand that the custom realm the sun app 7 offers is an extension of ISARealm where authenticate() is overloaded.
But authenticate() does only return a list of groups.
I want to return my own User class with interface Principle.
May I implement my own Realm implementation as a substitute for IASRealm, LdapRealm etc. ?
I know how to implement a JAASRealm for Tomcat because I did it and I want to use it on sun app 7 too.
Thanks,
Frerk

Answer 1

I don't know for sure, but I would suggest changing the user.dn
attribute. For example, I had o= yyy, ou=xxx, ou =xyz in LDAPV1 and in
LDAPV2 I have ou=xxx, o=yyy. So, I had to drop one 'ou' and put the ou
first.
Brynjar Glesnes wrote:
>
Hi,
When migrating from Weblogic 6.0 to Weblogic 6.1sp1 I want to use a
Custom Realm instead of the deprecated LDAP Realm. We are using
Netscape Directory Server 4.1. So I modify the Netscape template. I
get no warnings or errors when starting WLS and my groups are listed
in Groups in the Console. But when I try to authenticate a user
authentication fails. When I set up a LDAP Realm as before it succeeds
for the same user and operation.
I have browsed this usenet group without finding the solution. Do
anybody have a clue?
Here is the entry in config.xml for the Custom Realm:
<CustomRealm
ConfigurationData="user.filter=(&(uid=%u)(objectclass=person));user.dn=ou=People,
o=entraoslo.entra.no;membership.filter=(&(uniquemember=%M)(objectclass=groupofuniquenames));server.principal=uid=admin,
ou=Administrators, ou=TopologyManagement,
o=NetscapeRoot;group.filter=(&(cn=%g)(objectclass=groupofuniquenames));group.dn=ou=Groups,
o=entraoslo.entra.no;server.host=xxx.xxx.xxx.xxx"
Name="TakeCargoRealm"
Password="{3DES}ptTZvPU0y3CR76DZQZ8pqw=="
RealmClassName="weblogic.security.ldaprealmv2.LDAPRealm"/>
The entry in config.xml for the LDAP Realm:
<LDAPRealm AuthProtocol="simple"
Credential="{3DES}ptTZvPU0y3CR76DZQZ8pqw=="
GroupDN="o=entraoslo.entra.no, ou=Groups"
GroupIsContext="false"
GroupUsernameAttribute="uniquemember"
LDAPURL="ldap://xxx.xxx.xxx.xxx:389"
Name="TakeCargoDeprecatedRealm"
Principal="uid=admin, ou=Administrators,
ou=TopologyManagement, o=NetscapeRoot"
UserAuthentication="local"
UserDN="o=entraoslo.entra.no, ou=People"
UserNameAttribute="uid"/>
Any help would be appreciated.
Regards,
Brynjar Glesnes