<html><body>
<p><font size="2" face="sans-serif">So, I did a lot more research on our issue.</font><br>
<br>
<font size="2" face="sans-serif">We fixed it - Miller time was had by all that wanted a good beer.</font><br>
<br>
<font size="2" face="sans-serif">Did some ldap searches - to get the specific binding user - we did this...</font><br>
<br>
<font size="2" face="sans-serif">ldapsearch -Z -H ldap://aba-idam.aba.home.com -D 'uid=ddf,cn=users,cn=accounts,dc=aba,dc=home,dc=com' -W -b 'cn=users,cn=accounts,dc=aba,dc=home,dc=com' '(uid=ddf)' uid</font><br>
<br>
<font size="2" face="sans-serif">And made sure to enter in the full connection.username and its associated context. - Rob was exactly right!</font><br>
<font size="2" face="sans-serif">but, we still got errors until we looked at the role (ahem: Roles) played in the game.</font><br>
<br>
<br>
<font size="2" face="sans-serif">So, the Roles were REALLY important in the script...</font><br>
<br>
<font size="2" face="sans-serif">We created a role called admin, and added the user as the script REALLY needs the user to be an admin - I dunno why, but the developers said so, so....</font><br>
<br>
<font size="2" face="sans-serif">we then did an ldap search on the role of admin....</font><br>
<br>
<font size="2" face="sans-serif">ldapsearch -Z -H ldap://aba-idam.aba.home.com -D 'uid=ddf,cn=users,cn=accounts,dc=aba,dc=home,dc=com' -W -b 'cn=admin,cn=groups,cn=compat,dc=aba,dc=home,dc=com' 'cn=admin'</font><br>
<br>
<font size="2" face="sans-serif">then entering those properties as below...</font><br>
<br>
<font size="2" face="sans-serif"> <ext:property-placeholder /></font><br>
<br>
<font size="2" face="sans-serif"> <jaas:config name="karaf" rank="1"></font><br>
<font size="2" face="sans-serif"> <jaas:module className="org.apache.karaf.jaas.modules.ldap.LDAPLoginModule"</font><br>
<font size="2" face="sans-serif"> flags="required"></font><br>
<font size="2" face="sans-serif"> initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory</font><br>
<font size="2" face="sans-serif"> connection.username=uid=ddf,cn=users,cn=accounts,dc=aba,dc=home,dc=com</font><br>
<font size="2" face="sans-serif"> connection.password=iloveaba!</font><br>
<font size="2" face="sans-serif"> connection.url=ldaps://aba-idam.aba.home.com:636</font><br>
<font size="2" face="sans-serif"> user.base.dn=cn=users,cn=accounts,dc=aba,dc=home,dc=com</font><br>
<font size="2" face="sans-serif"> user.filter=(uid=%u)</font><br>
<font size="2" face="sans-serif"> user.search.subtree=true</font><br>
<font size="2" face="sans-serif"> role.base.dn=cn=groups,cn=compat,dc=aba,dc=home,dc=com</font><br>
<font size="2" face="sans-serif"> role.name.attribute=cn</font><br>
<font size="2" face="sans-serif"> role.filter=(member=uid=%u,cn=groups,cn=compat,dc=aba,dc=home,dc=com)</font><br>
<font size="2" face="sans-serif"> role.search.subtree=true</font><br>
<font size="2" face="sans-serif"> role.mapping=admin=group,admin,manager,viewer,webconsole</font><br>
<font size="2" face="sans-serif"> authentication=simple</font><br>
<font size="2" face="sans-serif"> ssl.protocol=SSL</font><br>
<font size="2" face="sans-serif"> ssl.truststore=truststore</font><br>
<font size="2" face="sans-serif"> ssl.algorithm=PKIX</font><br>
<font size="2" face="sans-serif"> </jaas:module></font><br>
<font size="2" face="sans-serif"> </jaas:config><br>
</font><br>
<br>
<font size="2" face="sans-serif">Saved it, crossed our fingers and tried to log in to the docker object...</font><br>
<br>
<font size="2" face="sans-serif">[admin@aba-desktop ~]$ ssh ddf@localhost -p 8101</font><br>
<font size="2" face="sans-serif">Password authentication</font><br>
<font size="2" face="sans-serif">Password:</font><br>
<font size="2" face="sans-serif"> ____ _ __ __ _</font><br>
<font size="2" face="sans-serif">/ ___| ___ _ ____ _(_) ___ ___| \/ (_)_ __</font><br>
<font size="2" face="sans-serif">\___ \ / _ \ '__\ \ / / |/ __/ _ \ |\/| | \ \/ /</font><br>
<font size="2" face="sans-serif"> ___) | __/ | \ V /| | (_| __/ | | | |> <</font><br>
<font size="2" face="sans-serif">|____/ \___|_| \_/ |_|\___\___|_| |_|_/_/\_\</font><br>
<br>
<font size="2" face="sans-serif"> Apache ServiceMix (7.0.0.M1)</font><br>
<br>
<font size="2" face="sans-serif">Hit '<tab>' for a list of available commands</font><br>
<font size="2" face="sans-serif">and '[cmd] --help' for help on a specific command.</font><br>
<font size="2" face="sans-serif">Hit '<ctrl-d>' or 'osgi:shutdown' to shutdown ServiceMix.</font><br>
<br>
<font size="2" face="sans-serif">ddf@root></font><br>
<br>
<br>
<br>
<font size="2" face="sans-serif">BOOM!</font><br>
<br>
<br>
<font size="2" face="sans-serif">Thank you Rob and Petr!!!!</font><br>
<br>
<br>
<br>
<br>
<font size="2" face="Trebuchet MS"><b>Michael Sean Conley</b></font><br>
</body></html>