Weblogic 10.3 ldap provider configuration

Question

Hello, I am trying to configure Weblogic 10.3 to use an LDAP authentication provider. I can see my list of Users from the ldap server, but I can not see the list of Groups. Any help with my config would be appreciated. I turned on debug for DebugSecurity and ldap. I do not seem to have a recent error from trying to view the groups in the logs. I have been doing grep -i error on the log dir.
Ldap-auth Config
Weblogic 10.3 (Windows install)
IPlanetAuth Provider - 1.0
LDAP Server – Fedora Directory Server (fedora-ds-1.0.4-1.RHEL4)
LDAP Group DN
     ou=fssys02,ou=Groups,dc=hns-net,dc=com
     Groups under fssys02 – 4 cn=fs* groups that do not show up in Weblogic
Group objectClass - groupOfUniqueNames (structural)
Control flag - OPTIONAL
IPlanetAuth Provider - 1.0
Keep Alive Enabled – yes
User Name Attribute – uid
Propagate Cause for Login Exception – yes
Principal -
Host – ldap
User Object Class – person
All Users filter -
User Search Scope – subtree
All Groups filter –
Static Member DN Attribute – uniqueMember
Bind Anonymously on Referrals – yes
Group From Name Filter - (&(cn=%g)(objectclass=groupofUniqueNames))
Static Group DNs from Member DN Filter - (&(uniqueMember=%M)(objectclass=groupofUniqueNames))
Use Retrieved user Name as Principal –
Results Time Limit – 0
Cache TTL – 60
Dynamic Group Name Attribute –
Credential –
Confirm Credential –
Group Search Scope – subtree
Group Base DN - ou=fssys02,ou=Groups,dc=hns-net,dc=com
Dynamic Group Object Class – groupofURLs
User From Name Filter - (&(uid=%u)(objectclass=person))
Dynamic Member URL Attribute – memberURL
Cache Size – 32
SSLEnabled –
Cache Enabled – yes
Connection Retry Limit – 1
Connect Timeout – 0
Parallel Connect Delay – 0
User Dynamic Group DN Attribute – cn
Static Group Name Attribute – cn
User Base DN - ou=People, dc=hns-net,dc=com
Follow Referrals – yes
Port – 389
Ignore Duplicate Membership –
Static Group Object Class –
Group Membersip Searching – unlimited
Max Group Membership Search Level – 15

Answer 1

Hi To View the LDAP Groups and the users
Groups and users has to been under one OU (organizational Unit) Check the Below Format
and in the Properties files you have to enable the LDAPGroup Proprties to true.
This is for iplanet
User path
ou=groups,dc=xxx,dc=xxxsoft,dc=com
Group path
ou=groups,dc=xxx,dc=xxxsoft,dc=com
Search filter
(objectclass=person)
for ADS Group base DN and user base Dn should be same (for example:-ou=test)
Group Base DN - ou=fssys02,ou=Groups,dc=hns-net,dc=com
User Base DN - ou=People, dc=hns-net,dc=com
Check it out.This Should work.