Nabble - Sun - JNDI Interest

JNDI API for Authentication sample code for AD server from AIX OS ?

2009-08-16T00:22:22Z

Hello All,
I have basic question on JNDI, I am new to the JNDI API. We have the requirement of the Authenticate the user credentails enterd by user on the on the Application Login Page , which runs on to the Tomcat Application server of AIX OS. LDAP server is Microsoft AD server.
1) Will JNDI API Will be the best solution ?
2) Can some one provide me the sample code for the same ?
I shpuld only get the return interms of True or false from LDAP server that user is authenticated or not . Kindly help me on aboce requirements... Thanks in Advance!

test message - please ignore

2008-08-01T07:44:11Z

Confused about Windows AD logon name

2008-06-08T23:49:54Z

Hello,

I am trying to access Windows AD by JNDI and I can authenticate by:
(algorithm is "Simple")
1. UPN, such as, username@...
2. DN, such as, cn=username, ou=member,dc=company,dc=com
and also with
3. RDN, such as, cn = username

Here is my problem.
The last type logon name(RDN) doesn't work with "Administrator".
I mean, I can authenticate with user principal as "cn=foo" but cannot using
"cn=Administrator".
It seems that Administrator account is special.
I want to know why?

I had tried to find some specification about Windows 2003 AD logon name but
result with nothing.

And I'd very appreciate any information on this problem.

Best regards,
Tetsu

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

Re: How to set TCP Keep-Alive for JNDI Connection ?

2008-05-16T08:26:19Z

JNDI provides an abstract naming interface which is explicitly designed to hide
much of the details of underlying connections and protocol elements.

I've attached a trival custom socket factory. You'll need to call setKeepAlive
in each of its createSocket methods before returning the Socket object. Then
just add the following line to your JNDI application to activate the factory:

env.put("java.naming.ldap.factory.socket", "MyCustomSocketFactory");

Vineet Vyas wrote:

> Hi Vincent,
>
> Thanks for your reply.
>
> I do understand that through custom sockets I might be able to achieve TCP
> Keep-Alive.
> But I wonder is there any simpler approach to this. I thought there might be
> a very obvious requirement for any JNDI Client.
>
> I haven't tried the Custom Socket myself but if u have any idea what should
> one keep in my mind while writing any Custom Socket. I meant with respect to
> connection pooling and other features...
>
> Thanks
> Vineet
>
> -----Original Message-----
> From: A mailing list for discussing Java Naming and Directory Interface
> (JNDI) [mailto:JNDI-INTEREST@...] On Behalf Of Vincent Ryan
> Sent: Friday, May 16, 2008 7:33 PM
> To: JNDI-INTEREST@...
> Subject: Re: How to set TCP Keep-Alive for JNDI Connection ?
>
> You could set the Socket.setKeepAlive metod to set the TCP flag:
>
> http://java.sun.com/javase/6/docs/api/java/net/Socket.html#setKeepAlive(bool
> ean)
>
> However in order to gain acess to the Socket you would have to supply a
> custom SocketFactory to JNDI. The factory could simply be a wrapper around
> the default socket factory that explicitly sets the keep-alive flag.
>
> See the Custom Sockets section in the JNDI Tutorial for more details:
>
> http://java.sun.com/products/jndi/tutorial/ldap/security/ssl.html
>
>
>
> Chun Tat David Chu wrote:
>> Hi Vineet,
>>
>> I have never set TCP keep-alive on JNDI client, but I know for sure
>> that's something you can set on the directory server side.
>>
>> - dc
>>
>> On Fri, May 16, 2008 at 8:10 AM, Vineet Vyas
>> <vineet_vyas@... <mailto:vineet_vyas@...>>
> wrote:
>> Hi All,
>>
>>
>>
>> I need to set TCP Keep-Alive flag true for JNDI Client Connection
>> with the Directory Server.
>>
>> Can anyone provide me any suggestion of how can it be done ?
>>
>>
>>
>> I am using *com.sun.jndi.ldap.LdapCtxFactory* and Sun JNDI Provider.
>>
>>
>>
>> Thanks in advance for any help in this regard.
>>
>>
>>
>> Thanks
>>
>> Vineet
>>
>> DISCLAIMER ========== This e-mail may contain privileged and
>> confidential information which is the property of Persistent Systems
>> Ltd. It is intended only for the use of the individual or entity to
>> which it is addressed. If you are not the intended recipient, you
>> are not authorized to read, retain, copy, print, distribute or use
>> this message. If you have received this communication in error,
>> please notify the sender and delete all copies of this message.
>> Persistent Systems Ltd. does not accept any liability for virus
>> infected mails.
>>
>>
> ===========================================================================
>> To unsubscribe, send email to listserv@...
>> <mailto:listserv@...> and include in the body of the
>> message "signoff JNDI-INTEREST". For general help, send email to
>> listserv@... <mailto:listserv@...> and include in
>> the body of the message "help".
>>
>>
>>
> ===========================================================================
>> To unsubscribe, send email to listserv@... and include in the
>> body of the message "signoff JNDI-INTEREST". For general help, send
>> email to listserv@... and include in the body of the message
>> "help".
>
> ===========================================================================
> To unsubscribe, send email to listserv@... and include in the body
> of the message "signoff JNDI-INTEREST". For general help, send email to
> listserv@... and include in the body of the message "help".
>
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

Re: How to set TCP Keep-Alive for JNDI Connection ?

2008-05-16T07:03:21Z

You could set the Socket.setKeepAlive metod to set the TCP flag:

http://java.sun.com/javase/6/docs/api/java/net/Socket.html#setKeepAlive(boolean)

However in order to gain acess to the Socket you would have to supply a
custom SocketFactory to JNDI. The factory could simply be a wrapper around
the default socket factory that explicitly sets the keep-alive flag.

See the Custom Sockets section in the JNDI Tutorial for more details:

http://java.sun.com/products/jndi/tutorial/ldap/security/ssl.html

Chun Tat David Chu wrote:

> Hi Vineet,
>
> I have never set TCP keep-alive on JNDI client, but I know for sure
> that's something you can set on the directory server side.
>
> - dc
>
> On Fri, May 16, 2008 at 8:10 AM, Vineet Vyas
> <vineet_vyas@... <mailto:vineet_vyas@...>> wrote:
>
> Hi All,
>
>
>
> I need to set TCP Keep-Alive flag true for JNDI Client Connection
> with the Directory Server.
>
> Can anyone provide me any suggestion of how can it be done ?
>
>
>
> I am using *com.sun.jndi.ldap.LdapCtxFactory* and Sun JNDI Provider.
>
>
>
> Thanks in advance for any help in this regard.
>
>
>
> Thanks
>
> Vineet
>
> DISCLAIMER ========== This e-mail may contain privileged and
> confidential information which is the property of Persistent Systems
> Ltd. It is intended only for the use of the individual or entity to
> which it is addressed. If you are not the intended recipient, you
> are not authorized to read, retain, copy, print, distribute or use
> this message. If you have received this communication in error,
> please notify the sender and delete all copies of this message.
> Persistent Systems Ltd. does not accept any liability for virus
> infected mails.
>
> ===========================================================================
> To unsubscribe, send email to listserv@...
> <mailto:listserv@...> and include in the body of the
> message "signoff JNDI-INTEREST". For general help, send email to
> listserv@... <mailto:listserv@...> and include in
> the body of the message "help".
>
>
> ===========================================================================
> To unsubscribe, send email to listserv@... and include in the
> body of the message "signoff JNDI-INTEREST". For general help, send
> email to listserv@... and include in the body of the message
> "help".

Re: How to set TCP Keep-Alive for JNDI Connection ?

2008-05-16T06:43:11Z

Hi Vineet,

I have never set TCP keep-alive on JNDI client, but I know for sure that's something you can set on the directory server side.

- dc

On Fri, May 16, 2008 at 8:10 AM, Vineet Vyas <vineet_vyas@...> wrote:

Hi All,

I need to set TCP Keep-Alive flag true for JNDI Client Connection with the Directory Server.

Can anyone provide me any suggestion of how can it be done ?

I am using com.sun.jndi.ldap.LdapCtxFactory and Sun JNDI Provider.

Thanks in advance for any help in this regard.

Thanks

Vineet

DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

=========================================================================== To unsubscribe, send email to listserv@... and include in the body of the message "signoff JNDI-INTEREST". For general help, send email to listserv@... and include in the body of the message "help".

How to set TCP Keep-Alive for JNDI Connection ?

2008-05-16T05:10:19Z

Hi All,

I need to set TCP Keep-Alive flag true for JNDI Client Connection with the Directory Server.

Can anyone provide me any suggestion of how can it be done ?

I am using com.sun.jndi.ldap.LdapCtxFactory and Sun JNDI Provider.

Thanks in advance for any help in this regard.

Thanks

Vineet

DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

Re: [ldapext] Fwd: Call for interop proposals

2008-01-16T00:51:00Z

Tom Doman wrote:
>
> I thought I was on the JNDI interest list but I didn't see your message
> about JNDI and RFC 4370.

My message to JNDI-INTEREST is archived - no response there. :-(
http://article.gmane.org/gmane.comp.java.sun.jndi/268

My first attempt to clarify things with OpenLDAP developers:
http://www.openldap.org/lists/openldap-software/200706/msg00213.html

Kurt's short answer:
http://www.openldap.org/lists/openldap-software/200706/msg00220.html

Pierangelo's verbose answer:
http://www.openldap.org/lists/openldap-software/200706/msg00221.html

So if using the control OID from RFC 4370 it must get fixed (probably
leading to interop problems with other wrong implementations).

Ciao, Michael.

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

Re: [ldapext] Fwd: Call for interop proposals

2008-01-15T15:56:20Z

I attached Michael's original

>>> Tom Doman <tdoman@...> 01/15/08 4:47 PM >>>
Michael,

I thought I was on the JNDI interest list but I didn't see your message
about JNDI and RFC 4370.  I've been looking at using proxy authz
using JNDI, how does it fall short?  I haven't tried it yet but I'd love
to know what you've experienced.

Thanks,
Tom

>>> Michael Ströder <michael@...> 01/15/08 11:20 AM >>>
Jaimon Jose wrote:
> We do have  test suites defined by opengroup which most of the directory
> vendors follow.  Would that be sufficient? or should we define new test
> suites as part of this exercise?

Would be interesting to test some things which have rather draft status
like draft- zeilenga- ldap- relax- 02.txt (together with a user interface)
or non- OpenLDAP syncrepl implementations (RFC 4533) if they exist.

Do the test suites of opengroup also cover proxy authorization? E.g.
JNDI falls short following RFC 4370 and there hasn't any response to my
inquiry on the JNDI- INTEREST mailing list. Ah, well...

How about testing over Internet? Less social fun but also less traveling.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
Ldapext@...
https://www1.ietf.org/mailman/listinfo/ldapext

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST".  For general help, send email to
listserv@... and include in the body of the message "help".

=========================================================================== To unsubscribe, send email to listserv@... and include in the body of the message "signoff JNDI-INTEREST". For general help, send email to listserv@... and include in the body of the message "help".
HI!

It seems my first e-mail did not come through to the list.

I'm currently testing proxy authorization with the control
implementation com.sun.jndi.ldap.ctl.ProxiedAuthorizationControl in
Sun's LDAP boost pack 1.0 for JNDI with OpenLDAP 2.3.36.

slapd seems to be configured correctly since this command-line works:

ldapsearch -x -H "ldap://localhost:1390" -D
"uid=proxyuser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de" -w
testproxy -b "ou=Testing,dc=stroeder,dc=de" -s sub -e
\!authzid="dn:uid=proxieduser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de"
"(objectClass=*)"

Now I'm trying to do the same via JNDI (see source attached below). But
this results in:

Exception: javax.naming.NamingException: [LDAP: error code 47 - authzId
mapping failed]; remaining name 'ou=Testing,dc=stroeder,dc=de'

If starting slapd with debugging (-d args,trace,packets) I can see in
the logs extra chars before "dn:" in line starting with
"parseProxyAuthz". I extracted the control from data sniffed with
Wireshark and even dumpasn1.c did not manage to decode it properly. So I
suspect something's wrong with the encoding. Can anybody please confirm
this?

The OpenLDAP developers say this is because JNDI implements an old
version of the control based on an early draft specification of the
control instead of RFC 4370 (Standards Track), but unfortunately with
the same OID.

How difficult would it be to implement the control myself?

Ciao, Michael.

--
Michael Ströder
michael@...
http://www.stroeder.com

------------------------------ snip ------------------------------
import javax.naming.NamingEnumeration;
import javax.naming.directory.DirContext;
import javax.naming.ldap.Control;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.LdapContext;
import com.sun.jndi.ldap.ctl.ProxiedAuthorizationControl;
import java.util.Hashtable;
//import javax.naming.directory.SearchResult;

class Test2
{
public static void main(String args[])
{
String url = "ldap://127.0.0.1:1390";
LdapContext ctx = null;
Hashtable env = null;
NamingEnumeration enumResults = null;

try
{
env = new Hashtable();

// Use LDAP service provider from Sun

env.put(DirContext.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(DirContext.REFERRAL, "throw");
env.put(DirContext.PROVIDER_URL, url);

env.put(DirContext.SECURITY_PRINCIPAL,"uid=proxyuser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de");
env.put(DirContext.SECURITY_CREDENTIALS,"testproxy");
ctx = new InitialLdapContext(env,null);

// use Proxy Authorization Control
ProxiedAuthorizationControl p = new
ProxiedAuthorizationControl("dn:uid=proxieduser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de");
ctx.setRequestControls(new Control[]{p});

enumResults = ctx.search("ou=Testing,dc=stroeder,dc=de",
"(objectclass=*)", null);

}
catch (Exception e)
{
System.out.println("Exception: " + e.toString());
}
System.out.println("Programmende");
}

}

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

Mime.822 (6 bytes) Download Attachment

Re: [ldapext] Fwd: Call for interop proposals

2008-01-15T15:47:31Z

Michael,

I thought I was on the JNDI interest list but I didn't see your message
about JNDI and RFC 4370. I've been looking at using proxy authz
using JNDI, how does it fall short? I haven't tried it yet but I'd love
to know what you've experienced.

Thanks,
Tom

>>> Michael Ströder <michael@...> 01/15/08 11:20 AM >>>
Jaimon Jose wrote:
> We do have test suites defined by opengroup which most of the directory
> vendors follow. Would that be sufficient? or should we define new test
> suites as part of this exercise?

Would be interesting to test some things which have rather draft status
like draft- zeilenga- ldap- relax- 02.txt (together with a user interface)
or non- OpenLDAP syncrepl implementations (RFC 4533) if they exist.

Do the test suites of opengroup also cover proxy authorization? E.g.
JNDI falls short following RFC 4370 and there hasn't any response to my
inquiry on the JNDI- INTEREST mailing list. Ah, well...

How about testing over Internet? Less social fun but also less traveling.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
Ldapext@...
https://www1.ietf.org/mailman/listinfo/ldapext

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

EUROMILLONES AWARD 2007

2007-08-06T07:01:10Z

EUROMILLONES AWARD 2007
****************************
Congratulations to you as we bring to your notice the result of
EUROMILLION 2007 promotions.

We are happy to inform you that your email address have emerged winner
of SEVEN HUNDRED AND FIFTY THOUSAND EUROS (EUR 750,000)Euros.

NOTE: to file for your claim, please contact the claim Company with the
informations below.
**************************************************
AURA SEGUROS S.A
Mr. Mario Alberto,
Address: Calle Castellana 10, 28090 Madrid-Spain.
Tel. : +34-691-923-601
Email : contactaura@...
or : auraseguros@...
**************************************************
Find below your promotion date, Reference and Batch numbers. Remember
to quote these numbers in your correspondence with your claims agent
Mr. Mario Alberto.
**************************************************
(1) Ref No: ESM/WIN/008/05/10/MA
(2) Batch No: EULO/2907/444/908/06
(3) Lucky No: 3-18-40-40-76
(4) Serial No: 45407
(5) PROMOTION DATE: 28th July 2007.
**************************************************
Best Regards,
Mrs. Finela Transofa
(Lottery coordinator).
Madrid, 6th August. 2007

Ahora también puedes acceder a tu correo Terra desde el móvil.
Infórmate pinchando aquí.
=========================================================================== To unsubscribe, send email to listserv@... and include in the body of the message "signoff JNDI-INTEREST". For general help, send email to listserv@... and include in the body of the message "help".

greasy crank case

2007-08-05T18:46:51Z

kcvsa ohrkgva vnldsogdankg
gyqildv vjcmrjt guaja

girl scout.jpg (11K) Download Attachment

uxorious food stamp

2007-08-05T18:44:17Z

kbxpgy lcuhyqd idqivm aria
vniarjwbtkcpg mdum

boy.jpg (11K) Download Attachment

makeshift microscope

2007-08-05T01:35:37Z

hwtipjd mxntnyoak etstjh
wmgwbegnufabeln

chess board.jpg (11K) Download Attachment

Alaskan cowboy

2007-08-04T01:01:46Z

bdyaxhlojayduavrerb brforaw evvaposkbbx

razor blade.jpg (11K) Download Attachment

nearest corporation

2007-08-02T23:47:25Z

sarid dqivivi vmdupb gypyl lycttxo oariaamer

bicep.jpg (11K) Download Attachment

soggy deficit

2007-08-01T10:13:46Z

lbqkeur fdkqkvb fmta ceufddf tvpnl mxiyepgiomf

tape recorder.jpg (12K) Download Attachment

gratifying curse

2007-07-31T13:05:17Z

iygjv avpsxaidgjxxvcax cioqjus jpfqpkkwjyke

rattlesnake.jpg (6K) Download Attachment

strawberry-blonde mastadon

2007-07-31T12:57:30Z

lxemmtsegwtqbqkrk yehw gvgn horoukd seug

fire hydrant.jpg (6K) Download Attachment

Natural Male Enhancement?

2007-07-30T12:51:39Z

HI soulmate,

Considering Pënus Énlargemënt?

Breaking News:
The Biggest Breakthrough in The Industry.

Now you can 'Gain' without Surgery or even ?mbarrassing
ÐocTor's visit.

This is The Only Clinically Tested þrodcut recomended by
þhysicians in 29 countries.

Learn more

http://sumnerase.googlepages.com/zeextender-google.htm

You will be thankful to me

Thank you for listening.

-The Atlantic Coastal Action Program set up by Environment Canada 1991 "to mobilize local communities to address their own environmental and developmental
GEO 330 Geography of the United States and Canada GEO 412 Glacial & Quarternary Geology, 4 credits GEO 419 Application of Geographic Information Systems to
Subject:: England Church history 16th century Series:: Ideas in Context; Series Volume:: 7; Publication Date:: July 1996; Binding:: Hardback
machination a crafty scheme intended to accomplish some usually evil end Saturday December 02
The creative process is centered in the mind of the artist, like
Fifteen minutes of fame
As we move into the new millennium, the impact of modern society on the environment is a key concern around the world Examining how the people of Russia
The fisherman would throw the whale fish I took the fish and then I said I need to get some more blue fish for this whale
FreeFoto.com - one of the largest collections of free photographs for noncommercial use on the Internet.
Echo: A Gateway to Exploring and Collecting the History of Science Dedicated to using the internet to collect and assemble (for the historical record) personal recollections of recent developments in science and technology,

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

elusive dissident

2007-07-23T10:51:27Z

hiee xxxy eijjos llmqv fxsaokbtk qmevnea =========================================================================== To unsubscribe, send email to listserv@... and include in the body of the message "signoff JNDI-INTEREST". For general help, send email to listserv@... and include in the body of the message "help".

stovepipe.jpg (12K) Download Attachment

Problem loading different certificates for SSL

2007-07-18T02:30:32Z

Hi,

We have couple of applications in the same JVM (a server). Both applications
use different certificates for SSL.
Both applications use default SSL factory javax.net.ssl.SSLSocketFactory.
The thing with the implementation of this class is that it loads the
SSLContext just once.
So, the application that creates an SSL connection first wins. The
application that tries to create an SSL connection later cannot do so as the
certificates of the first application are loaded.

One of the applications is an LDAP client and uses
"java.naming.ldap.factory.socket" property. This is the client I can
rewrite. I cannot recode the other client.

How can I specify an SSL context explicitly? I tried writing my own
SSLSocketFactory but SSLSocket is abstract.

Thanks,
PkS

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

load bearing cyprus mulch

2007-07-17T05:42:01Z

ucmxdxaw tvqpgeu lolkq
xamfu yhjyygw xicajo

grizzly bear.png (35K) Download Attachment

fat spider

2007-07-10T09:26:12Z

knykrq mgnmp htjv etqgnap vpbnyk hkrygca jvqbric

grain of sand.png (34K) Download Attachment

gentle piroshki

2007-07-08T22:07:48Z

wugs gbss mhauutdiaau
qyypb xblx kokkf =========================================================================== To unsubscribe, send email to listserv@... and include in the body of the message "signoff JNDI-INTEREST". For general help, send email to listserv@... and include in the body of the message "help".

pit viper.jpg (11K) Download Attachment

federal cloud formation

2007-07-07T01:53:38Z

mvmqh culckb ariaggsosba
gttch kfjrm nwniaay

food stamp.jpeg (12K) Download Attachment

sheepish judge

2007-07-07T01:53:36Z

wreiqylgcnyv yvivcwpilvvht nqdl ktfon yckkni

sandwich.jpeg (12K) Download Attachment

jsp extension of the page name.

2007-07-06T03:02:59Z

Brokers Move On ERMX!

EntreMetrix Inc. (ERMX)
$0.18

Heavy trading today as ERMX announced its launch of digital support
tools for its portfolio companies. Brokers are getting ahead of this
steady climb as they grab up large blocks of shares for there clients.
Look at the numbers and get on ERMX Friday morning!

In the case of the calculator, the script directory contains a script
file that redirects requests to particular pages of the application.

" Java Message Service API Messaging is a method of communication
between software components or applications. We display the history so
you know what a good price is.
Service providers implement particular email protocols, such as SMTP.
"The first thing consumers need to know in shopping for flights is what
a good price is.

HTML servlet classes extend the javax. A messaging system is a
peer-to-peer facility.
The winning company could, in effect, offer deeper discounts on airfare
as long as the source of the discount was hidden. A messaging system is
a peer-to-peer facility. Profiler tool vendors will often need to
create an agent library that uses JVM TI. Next, it shows how to
incorporate jMaki widgets into your Phobos application. You must pay
close attention to detail when you add an agent library.
There is no need to compile or redeploy the application.

"Airlines use quick-hit short-term prices to test their pricing
strategy, to indicate displeasure with another airline that's
'tweaking' them, or simply to correct mistakes.
It provides applications with methods for performing standard directory
operations, such as associating attributes with objects and searching
for objects using their attributes.

A container implements the component's environment and provides it to
the component as a JNDI naming context.
Using JNDI, a web application can store and retrieve any type of named
Java technology object, allowing applications to coexist with many
legacy applications and systems. If your application is inside a secure
sandbox, how can it do unsafe things like save data to disk? Purchasing
travel is very similar to the stock market, where there are normally
only a few perfect times a year to buy. Java Servlet API The Java
Servlet API lets you define HTTP-specific classes.
This will be the first function called in the agent library.

Currently, Phobos supports the JavaScript and JRuby engines.
Service providers implement particular email protocols, such as SMTP.
No matter how many you end up using, it's good to know what is available
to you and how you can use each one in a web application.
Seaney and Wallace began researching the travel industry's software
challenges and found themselves consulting with Hotels. See also
"Getting Started With Sun Java Studio Creator. So what does agent
initialization look like?
js defines the two functions implemented by the Calculator controller
object: show and compute. The -Xrun option would load the libraries
after the VM had initialized itself, sometimes resulting in early VM
events not being available to the agent.
This tells the label to turn off its background. JavaServer Faces
Technology JavaServer Faces technology is a UI framework for building
web applications. If your application asks for permissions, the user
will see a warning dialog.

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

lovely toothpick

2007-07-04T21:06:14Z

tveop gdpqjxqbbvlygt gkvdkww hiexx qtihwumxyocdh

warranty.jpeg (11K) Download Attachment

nefarious inferiority complex

2007-07-04T13:12:58Z

fhapxfh kbtaoh ltlmsn raleum fxgknsudaabo gyalab

squid.jpeg (11K) Download Attachment

botched widow

2007-07-02T02:29:14Z

edlknsasml xamact ojvu
feuhobn viyugx pnrdpc

toothpick.png (19K) Download Attachment

rapacious guardian angel

2007-07-02T02:29:13Z

xwvu qpsrq gnusr pblaua
vtsrdcw pcowemt ltjrely

pork chop.png (19K) Download Attachment

hypnotic chestnut

2007-06-30T04:47:07Z

aapxwvunmlonrqxajadg fnria pnervqsnho jedcvdu

lunatic.png (20K) Download Attachment

JavaWorld Article about Spring LDAP using JNDI

2007-06-28T06:58:06Z

http://www.javaworld.com/javaworld/jw-06-2007/jw-06-springldap.html

By Sunil D. Patil, JavaWorld.com, 06/26/07

Spring LDAP is a Spring-based framework that simplifies LDAP programming on
the Java platform. In this step-by-step guide to using Spring LDAP you will
learn how the framework handles the low-level coding required by most LDAP
clients, so that you can focus on developing your application's business
logic. You will also practice simple CRUD operations using Spring LDAP and
learn about more advanced operations such as creating dynamic filters and
converting LDAP entries into Java beans.
...

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".

Proxy Authz interoperability of Sun's JNDI LDAP boost pack and OpenLDAP

2007-06-26T07:42:52Z

HI!

It seems my first e-mail did not come through to the list.

I'm currently testing proxy authorization with the control
implementation com.sun.jndi.ldap.ctl.ProxiedAuthorizationControl in
Sun's LDAP boost pack 1.0 for JNDI with OpenLDAP 2.3.36.

slapd seems to be configured correctly since this command-line works:

ldapsearch -x -H "ldap://localhost:1390" -D
"uid=proxyuser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de" -w
testproxy -b "ou=Testing,dc=stroeder,dc=de" -s sub -e
\!authzid="dn:uid=proxieduser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de"
"(objectClass=*)"

Now I'm trying to do the same via JNDI (see source attached below). But
this results in:

Exception: javax.naming.NamingException: [LDAP: error code 47 - authzId
mapping failed]; remaining name 'ou=Testing,dc=stroeder,dc=de'

If starting slapd with debugging (-d args,trace,packets) I can see in
the logs extra chars before "dn:" in line starting with
"parseProxyAuthz". I extracted the control from data sniffed with
Wireshark and even dumpasn1.c did not manage to decode it properly. So I
suspect something's wrong with the encoding. Can anybody please confirm
this?

The OpenLDAP developers say this is because JNDI implements an old
version of the control based on an early draft specification of the
control instead of RFC 4370 (Standards Track), but unfortunately with
the same OID.

How difficult would it be to implement the control myself?

Ciao, Michael.

--
Michael Ströder
michael@...
http://www.stroeder.com

------------------------------ snip ------------------------------
import javax.naming.NamingEnumeration;
import javax.naming.directory.DirContext;
import javax.naming.ldap.Control;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.LdapContext;
import com.sun.jndi.ldap.ctl.ProxiedAuthorizationControl;
import java.util.Hashtable;
//import javax.naming.directory.SearchResult;

class Test2
{
public static void main(String args[])
{
String url = "ldap://127.0.0.1:1390";
LdapContext ctx = null;
Hashtable env = null;
NamingEnumeration enumResults = null;

try
{
env = new Hashtable();

// Use LDAP service provider from Sun

env.put(DirContext.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(DirContext.REFERRAL, "throw");
env.put(DirContext.PROVIDER_URL, url);

env.put(DirContext.SECURITY_PRINCIPAL,"uid=proxyuser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de");
env.put(DirContext.SECURITY_CREDENTIALS,"testproxy");
ctx = new InitialLdapContext(env,null);

// use Proxy Authorization Control
ProxiedAuthorizationControl p = new
ProxiedAuthorizationControl("dn:uid=proxieduser,ou=proxyauthztests,ou=Testing,dc=stroeder,dc=de");
ctx.setRequestControls(new Control[]{p});

enumResults = ctx.search("ou=Testing,dc=stroeder,dc=de",
"(objectclass=*)", null);

}
catch (Exception e)
{
System.out.println("Exception: " + e.toString());
}
System.out.println("Programmende");
}

}

===========================================================================
To unsubscribe, send email to listserv@... and include in the body
of the message "signoff JNDI-INTEREST". For general help, send email to
listserv@... and include in the body of the message "help".