Technical data

14 Managing Security
14-22 Administration Guide
Note: When using the LDAP v2 realm for Microsoft Site server, you must also
specify
membership.search=true and the following must be added to the
user.filter value so that Microsoft Site server does not authenticate
disabled users:
user.filter=(&(sAMAccountName=%u)(objectclassname=user)
(!userAccountControl:1.2.840.113556.1.4.803:=2))
4. To save your changes, click the Apply button.
5. Go to the Security node.
6. Choose the Filerealm tab.
7. Configure the Caching realm. For more information, see “Configuring the
Caching Realm.”
Note: When you use an LDAP Security realm, you must configure and enable the
Caching realm; otherwise, the LDAP Security realm will not work.
When configuring the Caching realm, select the
defaultLDAPRealmforLDAPserver (for example,
defaultLDAPRealmforOpenLDAPDirectoryServices) from the pull-down menu
for the Basic attribute on the General tab. The Basic attribute defines the
association between the Caching realm and the alternate security realm (in this
case, the LDAP Realm).
8. Reboot WebLogic Server.
Supported LDAP Server Templates
Listing 14-1 through Listing 14-5 are templates used to configure LDAP servers
supported by the LDAP V2 Realm.
Warning: Each line in the following code examples must appear on a single line.
The code in the code examples has been formatted to fit the margins of
this document and some lines have been broken to facilitate that
formatting.
Listing 14-1 Default Netscape Directory Server Template
<CustomRealmName="defaultLDAPRealmForNetscapeDirectoryServer"
RealmClassName="weblogic.security.ldaprealmv2.LDAPRealm"