User roles from external active directory

Question

Hi,
I am using my own active directory and not the embedded LDAP on weblogic.
On weblogic server, there the role names and the Provider configured
at path Home >Summary of Security Realms >myrealm >Users and Groups > Groups tab
The provider is configured at path
Home >Summary of Security Realms >myrealm >Users and Groups >Providers
Under 'Provider specific' tab, I have configured the Host, Port, Principal, Credentials etc.
I want to get these roles for the user who is login to the app.
I tried to follow the steps on http://biemond.blogspot.com/2008/12/using-weblogic-provider-as.html, However, when I run the 'Configure ADF Security' wizard I don't get the 'Identity Store' and 'LDAP Identity Store'.
Can someone please guide me on this with the proper steps and some specific jars if required for this?

Answer 1

I don't think these links are useful for me. Here is what I am trying to do. Not sure this is right way to do this. I am really stuck on this and need quick help. Please help.
  public boolean isInitiatorRole(String userName) {
      System.out.println("++++ Calling isInitiatorRole()");
      boolean hasRole = false;
      Hashtable factEnv = new Hashtable();
      Hashtable storeEnv = new Hashtable();
      IdentityStoreFactoryBuilder builder = new IdentityStoreFactoryBuilder();
      IdentityStoreFactory adFactory =null;
      IdentityStore idStore =null;
      System.setProperty("javax.net.ssl.trustStore", "/xxx/local/apps/oracle/SOA/jrmc-3.1.2-1.6.0/jre/lib/security/cacerts");
      System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
      String   storeLocation1 = System.getProperty("javax.net.ssl.trustStore")!=null?System.getProperty("javax.net.ssl.trustStore"):"###";
      String   storePass1 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"###";
// creating the factory instance
      factEnv.put(ADIdentityStoreFactory.ST_SECURITY_PRINCIPAL,"ABCD");
      factEnv.put(ADIdentityStoreFactory.ST_SECURITY_CREDENTIALS,"*****");
      factEnv.put(ADIdentityStoreFactory.ST_LDAP_URL, "ldap://xxx-xxxx-01.xxx.com:389/");
      factEnv.put("java.naming.security.protocol","SSL");
  // creating the store instance
      storeEnv.put(ADIdentityStoreFactory.ST_SUBSCRIBER_NAME,  "CN=itfusion,OU=Service Accounts,OU=Security,DC=adweb,DC=bmc,DC=com");
      System.out.println("++ AFTER setting prop storeLocation1:"+ storeLocation1 +  "   ++ storePass1:"+ storePass1);
        try {
            System.out.println("++++ TRY LOOP");
//          System.out.println("++++ User from context: " +ADFContext.getCurrent().getSecurityContext().getUserRoles());
            adFactory  =  builder.getIdentityStoreFactory("oracle.security.idm.providers.ad.ADIdentityStoreFactory", factEnv);
            if(adFactory != null){
              System.out.println("++++ adFactory not null");
            }else{
              System.out.println("++++ adFactory  null");
            idStore= adFactory.getIdentityStoreInstance(storeEnv);
            if(idStore != null){
              System.out.println("++++ idStore not null");
            }else{
              System.out.println("++++ idStore  null");
            User user;
            user = idStore.searchUser(userName);          
              if(user != null){
                  System.out.println("++++ User not null");
                  RoleManager roleManager;
                  roleManager = idStore.getRoleManager();
                  SearchResponse resp;
                  resp = roleManager.getGrantedRoles(user.getPrincipal(), true);
                  System.out.println("++++ IN WHILE LOOP");
                  while( resp.hasNext() ) {
                      System.out.println("++++ IN WHILE LOOP");
                      Identity id = resp.next();
                      String roleName = id.getName();
                      if(roleName != null){
                        System.out.println("Role Name:" + roleName);
                      }else{
                        System.out.println("Role Name is null");
      //                if( roleName != null && roleName.toUpperCase().indexOf("INITIATOR")>0) {
      ////                  if( roleName != null && roleName.toUpperCase().indexOf("XXXXX")>0) {
      //                    hasRole = true;
      //                    break;
                }else{
                  System.out.println("User is null");
        } catch (IMException e) {
            log.info("??? Error occured while checking the role for Initiator");
        return hasRole;
}