Worklight Application Center - Active Directory integration -

Worklight Application Center - Active Directory integration -

i'm trying integrate ibm worklight application center ad. it's deployed on websphere liberty profile on windows server 2008 r2 enterprise vm. i'm using documentation link: ibm knowledgebase

i managed connect advertisement authentication purposes config in server.xml:

<ldapregistry id="ldap" realm="sampleldapadrealm" host="ad.btb.hr" port="389" ignorecase="true" basedn="ou=btb,dc=btb,dc=hr" binddn="<mybinddn>" bindpassword="<mybindpw>" ldaptype="microsoft active directory" sslenabled="false"> <activedfilters userfilter="(&amp;(samaccountname=%v)(objectclass=user))" groupfilter="(&amp;(cn=%v)(objectcategory=group))" useridmap="user:samaccountname" groupidmap="*:cn" groupmemberidmap="memberof:member"> </activedfilters> <contextpool enabled="true" initialsize="1" maxsize="0" timeout="0s" waittime="3000ms" preferredsize="3"/> <ldapcache> <attributescache size="4000" timeout="1200s" enabled="true" sizelimit="2000"/> <searchresultscache size="2000" timeout="600s" enabled="true" resultssizelimit="1000"/> </ldapcache> </ldapregistry> <!-- begin of configuration added ibm worklight installer. --> <!-- declare ibm application center console application. --> <application id="appcenterconsole" name="appcenterconsole" location="appcenterconsole.war" type="war"> <application-bnd> <security-role name="appcenteradmin"> <group name="worklight-administrators"/> </security-role> <security-role name="appcenteruser"> <group name="worklight-users"/> </security-role> </application-bnd> </application> <!-- declare ibm application center services application. --> <application id="applicationcenter" name="applicationcenter" location="applicationcenter.war" type="war"> <application-bnd> <security-role name="appcenteradmin"> <!-- <group name="appcentergroup"/> --> <group name="worklight-administrators"/> </security-role> <security-role name="appcenteruser"> <group name="worklight-users"/> </security-role> </application-bnd> <classloader delegation="parentlast"> <commonlibrary> <fileset dir="${wlp.install.dir}/lib" includes="com.ibm.ws.crypto.passwordutil_1.0.1.jar"/> </commonlibrary> </classloader> </application>

then tried configuring acl can pull in users , groups "user , grouping management" part of app center using configuration:

<jndientry jndiname="ibm.appcenter.ldap.active" value="true"/> <jndientry jndiname="ibm.appcenter.ldap.connectionurl" value="ldap://ad.btb.hr"/> <jndientry jndiname="ibm.appcenter.ldap.user.loginname" value="samaccountname"/> <jndientry jndiname="ibm.appcenter.ldap.security.binddn" value="<mybinddn>"/> <jndientry jndiname="ibm.appcenter.ldap.security.bindpwd" value="<mybindpw>"/> <jndientry jndiname="ibm.appcenter.ldap.user.base" value="ou=btb,dc=btb,dc=hr"/> <jndientry jndiname="ibm.appcenter.ldap.group.base" value="ou=btb,dc=btb,dc=hr"/> <jndientry jndiname="ibm.appcenter.ldap.user.displayname" value="displayname"/> <jndientry jndiname="ibm.appcenter.ldap.group.name" value="cn"/> <jndientry jndiname="ibm.appcenter.ldap.group.uniquemember" value="member"/> <jndientry jndiname="ibm.appcenter.ldap.user.groupmembership" value="memberof"/> <jndientry jndiname="ibm.appcenter.ldap.cache.expiration.seconds" value="43200"/> <jndientry jndiname="ibm.appcenter.ldap.user.filter" value='"(&amp;(samaccountname=%v)(objectclass=user))"'/> <jndientry jndiname="ibm.appcenter.ldap.group.filter" value='"(&amp;(cn=%v)(objectcategory=group))"'/>

now, i'm getting error when accessing users/groups link in app center:

[24.10.14. 09:14:24:379 cest] 0000001b com.ibm.puremeap.services.mobileservices e { "id": "5b5c3b4c-cb1d-4094-8e84-b1fee1b31b35", "message": "fwlac0004e: ldap server cannot accessed.", "productversion": "6.2.0.00-20140613-0730" }

what have missed?

you using old version of worklight 6.2; update setup utilize latest. can latest worklight studio eclipse > help > eclipse marketplace. server artifacts, visit ibm prepare central website.

additionally, above contains prepare bug may yours. pi24446 connecting appcenter log-in name different case sensetive log in name defined in ldap result in error

worklight worklight-appcenter