LDAP-based Identity Store

Introduction

This sectoin covers how to configure PicketBox to use a LDAP-based Identity Store.

The only thing you need to know is how to configure this store with PicketBox. Its usage is the same as described by the Identity Management section. Remember that the most important component when working with PicketBox's Identity Management features is the Identity Manager. The stores only define which repository should be used and how to connect and integrate with them.

For more information about how to manage your users, roles, groups and related information using the Identity Manager, check the Identity Management section.

Configuration

To configure this store you need to use the Configuration API to define some specific configuration.

Configuring the LDAP-based Identity Store

ConfigurationBuilder builder = new ConfigurationBuilder();

builder
    .identityManager()
        .ldapStore()
            .url("ldap://localhost:10389/")
            .bindDN("uid=jduke,ou=People,dc=jboss,dc=org")
            .bindCredential("theduke")
            .userDNSuffix("ou=People,dc=jboss,dc=org")
            .roleDNSuffix("ou=Roles,dc=jboss,dc=org")
            .groupDNSuffix("ou=Groups,dc=jboss,dc=org");


PicketBoxManager picketBoxManager = // create and start the manager

IdentityManager identityManager = picketBoxManager.getIdentityManager();

// now you can play with the Identity Manager instance using the JPA Identity Store.