LDAP Authentication

[Benjamin Pack]

We’re working on an application that requires authentication against Active
Directory and authorization based on Roles.  I wanted to ask the community
what they would recommend for a out-of-the-box Wicket 1.4 plus LDAP
integration with the least amount of headaches (that will be our starting
point).  I’ve investigated SWARM and WASP along with Spring Security, but we
have concerns that our final solution will need to be a little more dynamic
and scalable than what SWARM can currently support.  Anyone have any
thoughts, ideas or experiences in working with Wicket, Roles and LDAP?



Thanks,

Ben

[ryantxu]

take a look at Apache Shiro
http://incubator.apache.org/shiro/

I found it much easier to work with...

There is a basic example with:
https://wicket-stuff.svn.sourceforge.net/svnroot/wicket-stuff/trunk/wicketstuff-core/shiro-security/

I have it working with JDBC or ActiveDirectory, using LDAP should be  
straight forward...


On Nov 5, 2009, at 3:16 PM, Benjamin Pack wrote:

> We’re working on an application that requires authentication against  
> Active
> Directory and authorization based on Roles.  I wanted to ask the  
> community
> what they would recommend for a out-of-the-box Wicket 1.4 plus LDAP
> integration with the least amount of headaches (that will be our  
> starting
> point).  I’ve investigated SWARM and WASP along with Spring  
> Security, but we
> have concerns that our final solution will need to be a little more  
> dynamic
> and scalable than what SWARM can currently support.  Anyone have any
> thoughts, ideas or experiences in working with Wicket, Roles and LDAP?
>
>
>
> Thanks,
>
> Ben

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[aldaris]

Hi,

You should check JAAS, AFAIK it has ldap-integration too, but if you
need to create an edit profile page, then I recommend you Spring-LDAP,
it's very easy to use (but I'm not sure, that the roles would work).

Regards,
Peter

2009-11-05 21:16 keltezéssel, Benjamin Pack írta:

> We’re working on an application that requires authentication against Active
> Directory and authorization based on Roles.  I wanted to ask the community
> what they would recommend for a out-of-the-box Wicket 1.4 plus LDAP
> integration with the least amount of headaches (that will be our starting
> point).  I’ve investigated SWARM and WASP along with Spring Security, but we
> have concerns that our final solution will need to be a little more dynamic
> and scalable than what SWARM can currently support.  Anyone have any
> thoughts, ideas or experiences in working with Wicket, Roles and LDAP?
>
>
>
> Thanks,
>
> Ben

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[T Ames]

I am using simple AuthenticatedWebApplication and AuthenticatedWebSession
which through that you can assign roles. There are examples in
wicket-examples.

 I wrote my own classes to verify credentials using javax.naming against AD.
Although I don't use roles much, you could assign a role based on AD Groups
membership.

[Filippo De Luca]

Do You know Spring-ldap?
Take a look at this presentation:
http://www.slideshare.net/PiergiorgioLucidi/spring-ldap.

 I think it is easy integrate spring-ldap with spring-security and so unsing
swarm.

2009/11/5 Benjamin Pack <ben.pack@...>

> We’re working on an application that requires authentication against Active
> Directory and authorization based on Roles.  I wanted to ask the community
> what they would recommend for a out-of-the-box Wicket 1.4 plus LDAP
> integration with the least amount of headaches (that will be our starting
> point).  I’ve investigated SWARM and WASP along with Spring Security, but
> we
> have concerns that our final solution will need to be a little more dynamic
> and scalable than what SWARM can currently support.  Anyone have any
> thoughts, ideas or experiences in working with Wicket, Roles and LDAP?
>
>
>
> Thanks,
>
> Ben
>

--
Filippo De Luca
--------------------------
Email: dl.filippo@...
Web:   http://www.filosganga.it
LinkedIn: http://www.linkedin.com/in/filippodeluca
mobile: [phone]

[Adrian Wiesmann]

Ryan McKinley wrote:
> take a look at Apache Shiro
> http://incubator.apache.org/shiro/
>
> I found it much easier to work with...

I agree with this. Apache Shiro is very easy to be used. Although the
learning curve is a little bit steep because of the documentation. But
once you get the hang for Realms and the (very few) classes you need to
know, things become less difficult.

We now integrated Shiro in our application and Authentication as well as
Authorisation is a very simple process now. Ping me if you need some
pointers to our implementation.

Cheers,
Adrian

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...