Use samaccountname and userpriciplename for authentication

[Former Member]

Hi all,

I am trying to find out if it is possible to use both IDs (samaccountname and userpriciplename) at the same time to authenticate a user against the portal. I have found out that by configuration either one can be used. Now I want to find out if it is possible to use both at the same time for authentication against the portal/ADS.

I assume that this can only be accomplished by modifying the com.sap.portal.runtime.logon.par.

Has anybody already done something similiar? Or can anyone point me to documentation describing how to access/search the ADS for such information using Java?

Thanks a alot for any input on this!

Best regards,

Helga

[Former Member]

You have to write a JAAS login module. Modify the com.sap.portal.runtime.logon.par won't do anything.

Message was edited by: Prakash Singh

[Former Member]

Hallo Parakash,

can you give an estimate of how long it will take to implement such a JAAS module? I have never implemented this before and am asked to give an estimation regarding the implementation time... .

Thanks alot for your input already!

BR Helga

[Former Member]

Helga,

Let me ask you this? Why do you need to write a new one? the JAAS login module that comes with portal will automatically authenticate against samaccountname(which is userid).

Prakash.

[Former Member]

Well, for the login the customer requires that the user should be able to either use his samaccountname e.g. smith or his userpriciplename e.g. john.smith@example.net.

I hope I could make it a bit more clear what I am trying to accomplish.

BR Helga

[Former Member]

Writing a custom login module should take about 2-3 weeks.

The part that can make it complicated is when java cannot lookup the userprinciplname in the jaas login module. In that case you are looking about 6 months of work. The work involves.

1. Write a DLL that talks to MS ADS.

1. Write a java wrapper class that talks to DLL.

2. call the java wrapper class from login module to get the userprinciplname to lookup the userid and then authenticate.

[Former Member]

Hallo Prakash Singh,

well, I have never written a .dll - sounds like fun :/... .

I will have research this topic in details to give a precise estimation for the time needed to implement this requirement.

But thank you anyhow for your fast response and help!

Best regards,

Helga

[Former Member]

You don't have to write DLL and java wrapper. JNDI is totally capable of executing LDAP query.