昨天测试openldap和jboss sso一直不成功,今天终于搞定,主要就是openldap的schemas。
jboss sso文档中如下写:
* This implementation supports the following standard LDAP schemas:
* User Identity Information stored in InetOrgPerson schema
* Role Information stored in GroupOfUniqueNames schema
但是如何建立针对jboss sso这样的schemas那?
1、一个基本的ldap schema
#base
dn: dc=example,dc=com
objectClass: dcObject
objectClass: organization
dc: example
o: Example Company
#opeldap manager user
dn: cn=Manager,dc=example,dc=com
objectClass: organizationalRole
objectClass: top
cn: Manager
#我们用户的ou
dn: ou=testPeople,dc=example,dc=com
objectClass: organizationalUnit
objectClass: top
ou: testPeople
#一个基本的inetOrgPerson
dn: cn=Test User,ou=testPeople,dc=example,dc=com
objectClass: inetOrgPerson
objectClass: organizationalPerson<