siteminder and connection pool
Hi,Im investigating a possible connection leak and Im wondering how siteminder go about creating/reusing connection to LDAP? Does it maintain a connection pool and is it set somewhere in siteminder? TIASee More
An Online Community for Identity & Access Management Professionals
ava mell's Discussions
siteminder and connection pool
1 Reply
Hi,Im investigating a possible connection leak and Im wondering how siteminder go about creating/reusing connection to LDAP? Does it maintain a connection pool and is it set somewhere in siteminder?…Continue
Started this discussion. Last reply by Todd Clayton Mar 17, 2010.
Siteminder Active Expression custom java class being called
6 Replies
Hi,I decided to create another thread instead of continuing the last because it may not be related to the original thread.anyway, Here's my problem:I am using Active Expression to do some LDAP update…Continue
Started this discussion. Last reply by Todd Clayton Mar 16, 2010.
siteminder and ldap
7 Replies
Just finding my way around siteminder and Ive got this requirement where I need to update a field in ldap each time a user is successfully authenticated. I need to handle this before the user is…Continue
Started this discussion. Last reply by Air Nasa Apr 21, 2010.
ava mell's Page
Gifts Received
ava mell has not received any gifts yet
Latest Activity
Air Nasa replied to ava mell's discussion 'siteminder and ldap'
Hello Ava,
Am new to this group. Just come this discussion in search of solution for simillar problem, to update the user last login time into database. Can you please update if active response (OnAuthAccept) worked for you and any inputs on how to…
Todd Clayton replied to ava mell's discussion 'siteminder and connection pool'
It varies a little by directory type, but in general Siteminder opens up three connections when connecting to an LDAP User Store:
- The first connection is to verify that the LDAP server is running. The Policy Server will "ping" the LDAP…
Todd Clayton replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
Thanks for the update. I'm glad it's working.
Todd
ava mell replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
Got the active expression working. I deployed on a fresh environment and everything worked fine. I still think it was the conflicting java versions used.
Todd, thanks for the help!
ava mell replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
oh yeah. typo error. I entered the full class name. Same problem.
Todd Clayton replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
The cache shouldn't come into play here. One thing I noticed above is that you list the parameter as being set to "customclass.java". Is the what you tried in the different scenarios as well? I believe that the parameter should be a…
ava mell replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
Hi Todd,
Moving the rule to a separate policy doesnt seem to help. I suspect that the custom class never gets called. I put some debug lines in the class but never see them in the logs.
Now I also tried a go with creating simple custom…
Todd Clayton replied to ava mell's discussion 'Siteminder Active Expression custom java class being called'
I can never remember the rules for which rules can appear in the same policy. Is you OnAuthAccept rule in the same policy as your GET/POST/PUT rules? If so, you could try moving the OnAuthAccept rule to a separate policy. I don't think that is…
Siteminder Active Expression custom java class not loaded
Hi,I decided to create another thread instead of continuing the last because it may not be related to the original thread.anyway, Here's my problem:I am using Active Expression to do some LDAP update upon authorization. Ive implemented it ina custom class to do the LDAP update. Ive set is as an Active Rule tiedup to the OnAuthAccept. where :Library Name : smjavaapiFunction Name : JavaActiveExpressionFunction Parameter : customclass.javaIve deployed the jar, updated the the jvmoptions.txt and…See More
Discussion posted by ava mell
Todd Clayton replied to ava mell's discussion 'siteminder and ldap'
Hi,
Yes, that should work. You can just return TRUE or something like that for the actual response. I have not gone through the API in detail, but this should work. In the Active Response you have access to the Sm_Api_UserContext_t structure. So,…
ava mell replied to ava mell's discussion 'siteminder and ldap'
Thanks Todd.
Im interested in creating active response. Correct me if Im wrong but from what I've gathered from your explanation, I can create a class to do the setting in LDAP that siteminder trigger upon OnAuthAccept. Is it much like a…
Todd Clayton replied to ava mell's discussion 'siteminder and ldap'
Hi,
Yes, this is the information that I was referring to that is stored in the password services blob. It is stored in the same user repository as the user. There is no way to put this information in another source. Also, this information is…
ava mell replied to ava mell's discussion 'siteminder and ldap'
btw, I looked at the password services documentation and it says there :
Track Login Details Check Box
This check box enables and disables tracking of user login attempts and successful logins, including the time of the last login. If you enable…
ava mell replied to ava mell's discussion 'siteminder and ldap'
yes. i want to capture the login time and store it in an attribute in ldap. I have a common login app(java) that is posting to the fcc file. Siteminder does its thing and then redirect the page to the original request(apps that I have no control…
Todd Clayton replied to ava mell's discussion 'siteminder and ldap'
What are you trying to update? Is it something last last login time? If so, you could use password services. I think you can read the password services blow now with the API to get the attributes. If it is a different value, there is no automatic…
Profile Information
- Job Title:
- Consultant
© 2012 Created by CoreBlox
