LDAP Authentication in Websphere 7

[Debopam Poddar]

We are using WAS 5.1 and migrating to WAS 7. Following code is used for LDAP authentication. Can some one explain how it is works and where it is specified to connect to which LDAP?

import javax.security.auth.Subject;
import javax.security.auth.login.LoginContext;
import javax.security.auth.login.LoginException;

public class CentivPAMWebSphere
implements ICentivPAM
{
	public CentivPAMWebSphere()
	{
	}

	public void authenticate(String strUserName, String strPassword)
			throws javax.security.auth.login.LoginException {
		LoginContext lc = new LoginContext(
				"WSLogin",
				new com.ibm.websphere.security.auth.callback.WSCallbackHandlerImpl(
						strUserName, strPassword));
		if (lc == null)
			throw new LoginException();
		lc.login();
		Subject s = lc.getSubject();
		if (s == null)
			throw new LoginException();
		lc.logout();
	}
}

[Deepak Pant]

I am not able to figure out anything from the code you pasted here. We have integrated with TDS 6.1.x and our code looks lot different. It has very specific installs, specific JNDI, property files etc. Suggest you look at the two part article present in this link:
http://www.ibm.com/developerworks/tivoli/library/t-ldap01/index.html

[Brian Hennessy]

Hi Debopam ,
I cannot answer the question on how it works because I have not looked at the source but I suspect under the covers it does some ldap lookup similar to the articles Deepak has provided. In terms of where the the ldap server is configured it will be in the Global security settings in admin console you need to select ldap as the active user registry. In the same screen it should provide a link to configure the ldap settings (host, port , base dn etc) . I believe this code will look at these configuration details to connect to ldap