JAAS LDAP module and directAuthenticator

[Losen, Stephen C. (scl)]

Hi folks,

Is it possible to configure the JAAS LDAP module in IDP 3.3.2 to do the equivalent of the directAuthenticator on the non-JAAS LDAP password verify module?  To verify the user's password you bind with the user's DN using the user's password, rather than using a service bind account and search.

Do you do something like this in the JAAS config file?

  bindDN="cn={user},cn=Users,dc=example,dc=org"
  bindCredential="{password}"

Assuming {password} is even supported in the JAAS config file.

I would like to use JAAS to verify a password using three separate LDAP servers and one of them requires the directAuthenticator approach.  The other two support it.  I have gotten password verification to work with one LDAP server using the non-JAAS module with directAuthenticator.  But I think I need JAAS to check three LDAP servers.

Stephen C. Losen
ITS - Systems and Storage
University of Virginia
scl at virginia.edu    434-924-0640