IBM WebSphere DataPower Community Forum IBM Webspere DataPower XI50
September 07, 2008, 03:10:45 AM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: IBM WebSphere DataPower SOA Appliance Forum - Just Launched come share your knowledge!!! These forums will be a great place to build a community. This site is not associated with IBM.
 
   Home   Help Search Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Setting up multiple domains for an user by using LDAP based RBM  (Read 174 times)
skadakath
Newbie
*
Offline Offline

Posts: 4


View Profile Email
« on: April 07, 2008, 01:33:21 PM »

Hi,
I am trying to setup the domains and users for the Datapower device X150. We are using LDAP based RBM and xmlfile as the authentication. I tried  the following and it did not work:

<aaa:MapCredentials>   <aaa:InputCredential>uid=user1,ou=DP,DC=DP,DC=ORG</aaa:InputCredential>
   <aaa:OutputCredential>developers</aaa:OutputCredential>
</aaa:MapCredentials>


<aaa:MapCredentials>
   <aaa:InputCredential>dpdevelopers</aaa:InputCredential>
   <aaa:OutputCredential>*/Dev1/*?Access=r+w+a+d+x </aaa:OutputCredential>
   <aaa:OutputCredential>*/Dev2/*?Access=r+w+a+d+x </aaa:OutputCredential>
</aaa:MapCredentials>

I also tried the following and it did not work

<aaa:MapCredentials>   <aaa:InputCredential>uid=user1,ou=DP,DC=DP,DC=ORG</aaa:InputCredential>
   <aaa:OutputCredential>dpdevelopers1</aaa:OutputCredential>
</aaa:MapCredentials>
<aaa:MapCredentials>   <aaa:InputCredential>uid=user1,ou=DP,DC=DP,DC=ORG</aaa:InputCredential>
   <aaa:OutputCredential>dpdevelopers2</aaa:OutputCredential>
</aaa:MapCredentials>

<aaa:MapCredentials>
   <aaa:InputCredential>dpdevelopers1</aaa:InputCredential>
   <aaa:OutputCredential>*/Dev1/*?Access=r+w+a+d+x </aaa:OutputCredential>   
</aaa:MapCredentials>

<aaa:MapCredentials>
   <aaa:InputCredential>dpdevelopers2</aaa:InputCredential>
   <aaa:OutputCredential>*/Dev2/*?Access=r+w+a+d+x </aaa:OutputCredential>   
</aaa:MapCredentials>

 We need to have same developer accessing multiple domains. How do I do that?
Any help greatly appreciated...

Thanks in advance,
Suresh
Logged
LordB
Administrator
Newbie
*****
Offline Offline

Posts: 42


View Profile
« Reply #1 on: April 07, 2008, 01:44:10 PM »

To have multiple access rules you separate them by newlines... its non standard xml... so  it would look like this...

   <aaa:InputCredential>dpdevelopers</aaa:InputCredential>
   <aaa:OutputCredential>*/Dev1/*?Access=r+w+a+d+x
   */Dev2/*?Access=r+w+a+d+x </aaa:OutputCredential>


If you use the RBM editor on datapower it will do this for you...
Logged
skadakath
Newbie
*
Offline Offline

Posts: 4


View Profile Email
« Reply #2 on: April 07, 2008, 06:39:16 PM »

Thanks. It worked.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  



Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Seo4Smf © Webmaster's Talks
This Site is not associated with IBM