WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Does LDAP users gets listed anywhere in WAS Console option?

    Posted Tue April 11, 2017 07:52 PM

    Hello,

    If we are using LDAP for application user authentication,then does that LDAP users gets list anywhere in WAS console options like underneath "User and Group"?

    Issue:-User wants his "ABC" application's access to be stricted to group of users as per their roles/designation say for instance "Manager" would have access to 7 functionality in ABC application whereas "VP" would have 10 etc etc.So user have created 7 roles in code via web.xml file and now they are reflecting in WAS Console path "All Applications > My-APP > Security role to user/group mapping".

    While Navigating to "Manage User or group" in WAS console ,I don't see any Application user name(LDAP user) getting listed,only user who have been given access to WAS console name reflects.



  • 2.  RE: Does LDAP users gets listed anywhere in WAS Console option?

    Posted Fri April 14, 2017 03:29 PM

    It is working as designed. The Application users are specific to the application.  The Manage Users/Groups are for WebSphere users/groups.



  • 3.  RE: Does LDAP users gets listed anywhere in WAS Console option?

    Posted Wed April 19, 2017 09:59 AM

    Please check these pages:
    https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/usec_sec_domains_edit.html

    https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/csec_sec_multiple_domains.html
    I guess  "application security" is not enabled

    Kind Regards



  • 4.  RE: Does LDAP users gets listed anywhere in WAS Console option?

    Posted Thu April 20, 2017 11:53 AM

    Hello Marika/Fabio,

    Thank you for you reply.

    2 days ago we got in con- call with IT architect ,Developer and Application team.Wherein to fix this issue it was concluded that Application team has to make some changes in Application JAVA code and LDAP roles/groups would have to be created on LDAP server not on WAS server.