nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

IdentitySession in Activiti 5.5

zeroone

Hey,

I wanted to integrate Spring Security into Activit's IdentitySession, but I was uanble to find the IdentitySession-Interface.
Could It be, that it is no longer available under the FQN: org.activiti.engine.impl.cfg.IdentitySession?

Ciao,

Christoph

Find more posts tagged with

Comments

frederikherema1

Hi,

The persistence internals have been renamed a bit. Look for UserManager and GroupManager now…

zeroone

Thanks found it.

heymjo

Since a lot of people have been asking on how to integrate their own user/group tables, would it be fair to ask for this to be included in the manual even with an EXPERIMENTAL tag ? I had just about puzzled the IdentitySession integration together from the forums, and now it has been renamed/split into UserManager and GroupManager. This is bound to throw off many forum searches.

Jorg

ronald_van_kuij

You can always start with writing a page that can be in the wiki or something… so feel free to write down what you did and how you achieved things… 🙂

limcheekin

Hi there,

I implemented custom identity session with Spring Security using the approach discuss here http://forums.activiti.org/en/viewtopic.php?f=6&t=1261

As IdentitySession is interface, where GroupManager and UserManager are concrete class. How do I implement the custom identity service in Activiti 5.5?

Lastly, in my opinion, it was more to major refactoring instead of minor renaming.

Please advice. Thanks.

Best regards,
Chee Kin

limcheekin

Anyone? This issue was blocking the release of Grails Activiti Plugin 5.5.

Best regards,
Chee Kin

transconnect

Hi all,

How do I implement the custom identity service in Activiti 5.5?

Because I also have the requirement to acces an LDAP, I've written two classes extending GroupManager and UserManager respective. Before creating the process engine, I have put the two classes as managers into the configuration:

<br>Map<Class<?>,SessionFactory> facts = ((ProcessEngineConfigurationImpl)config).getSessionFactories();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>facts.put( GroupManager.class, new org.activiti.engine.impl.persistence.GenericManagerFactory( LDAPGroupManager.class ) );<br>facts.put( UserManager .class, new org.activiti.engine.impl.persistence.GenericManagerFactory( LDAPUserManager .class ) );<br>

My problem is, that after the Password is accepted, and the user group "admin" is succesfully delivered, the logon fails with the following error appearing on the browser:

<br>HTTP ERROR: 500<br>Request processing failed; nested exception is org.springframework.extensions.surf.exception.UserFactoryException: Unable to retrieve user from repository<br>RequestURI=/activiti-probe/service/<br>

Which methods are required at minimum in these two classes. Are there another manager required to implement?

unknown-user

Hi all,

We desperately need an answer to Chee Kin's question (see above).

Thanks,
Markus

ageen

what I did is to add this to "processEngineConfiguration" config in spring,

<property name="customSessionFactories">
 <list>
 <bean class="com.xxxxx.user.ActivitiCustomUserManagerFactory">
 <property name="usersDao" ref="usersDAO"/>
 </bean>
 </list>
</property>

And this factory will return ActivitiCustomUserManager (extends UserManager) in its openSession() method.

Similar thing should be needed for GroupManager and its Factory as well.

limcheekin

what I did is to add this to "processEngineConfiguration" config in spring,

<property name="customSessionFactories">
 <list>
 <bean class="com.xxxxx.user.ActivitiCustomUserManagerFactory">
 <property name="usersDao" ref="usersDAO"/>
 </bean>
 </list>
</property>

And this factory will return ActivitiCustomUserManager (extends UserManager) in its openSession() method.

Similar thing should be needed for GroupManager and its Factory as well.

Thanks for writing.

I tried the following configuration:

<br><property name="customSessionFactories"><br><list><br><bean class="org.grails.activiti.springsecurity.SpringSecurityUserManagerFactory"><br><property name="usersDao" ref="usersDAO"/><br></bean><br><bean class="org.grails.activiti.springsecurity.SpringSecurityGroupManagerFactory"><br><property name="groupsDao" ref="groupsDAO"/><br></bean><br></list><br></property><br>

and SpringSecurityUserManagerFactory implementation:

<br>package org.grails.activiti.springsecurity;<br><br>import org.activiti.engine.impl.interceptor.Session;<br>import org.activiti.engine.impl.interceptor.SessionFactory;<br><br>class SpringSecurityUserManagerFactory implements SessionFactory {<br> public Class<?> getSessionType() {<br>&nbsp; return UserManager.class;<br> }<br><br> public Session openSession() {<br>&nbsp; return new UserManager();<br> }<br>}<br>

Unluckily, the code above doesn't work, did I overlook anything?

Please advice.

Best regards,
Chee Kin

carlos1

I managed to make it work by doing what you did:

<br>public Class<?> getSessionType() {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return UserManager.class;<br>&nbsp;&nbsp; }<br><br>&nbsp;&nbsp; public Session openSession() {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return new MyUserManager();<br>&nbsp;&nbsp; }<br><br>

Notice the MyUserManager()

At the activity repository one can find a test that shows how to replace the IdentitySession. However that code doesn't work anymore in activiti 5.5 as mention here.

It would be nice to know if the way to replace the IdentitySession/UserManager will change in the future. I understand that activiti is currently under development but I think it is important to know if which APIs are stable besides the public APIs. Unfortunately there is no documentation about it (or at least I could not find it).

ageen

what I did is to add this to "processEngineConfiguration" config in spring,

<property name="customSessionFactories">
 <list>
 <bean class="com.xxxxx.user.ActivitiCustomUserManagerFactory">
 <property name="usersDao" ref="usersDAO"/>
 </bean>
 </list>
</property>

And this factory will return ActivitiCustomUserManager (extends UserManager) in its openSession() method.

Similar thing should be needed for GroupManager and its Factory as well.

Thanks for writing.

I tried the following configuration:
 <property name="customSessionFactories"> <list> <bean class="org.grails.activiti.springsecurity.SpringSecurityUserManagerFactory"> <property name="usersDao" ref="usersDAO"/> </bean> <bean class="org.grails.activiti.springsecurity.SpringSecurityGroupManagerFactory"> <property name="groupsDao" ref="groupsDAO"/> </bean> </list> </property> and SpringSecurityUserManagerFactory implementation:
 package org.grails.activiti.springsecurity; import org.activiti.engine.impl.interceptor.Session; import org.activiti.engine.impl.interceptor.SessionFactory; class SpringSecurityUserManagerFactory implements SessionFactory { public Class<?> getSessionType() {   return UserManager.class; } public Session openSession() {   return new UserManager(); } } 
What error did you see? In your config, the factory has DAO reference, how come there is not such property in your actual class?

Thanks.

Unluckily, the code above doesn't work, did I overlook anything?

Please advice.

Best regards,
Chee Kin

limcheekin

What error did you see? In your config, the factory has DAO reference, how come there is not such property in your actual class?

Thanks.

Thanks for writing. It is copy and paste mistake. I basically set up the Spring application context using Spring DSL in Grails. The corrected code (my application don't need DAOs) below is for illustration only:

<br><property name="customSessionFactories"><br><list><br>&nbsp; <bean class="org.grails.activiti.springsecurity.SpringSecurityUserManagerFactory" /><br>&nbsp; <bean class="org.grails.activiti.springsecurity.SpringSecurityGroupManagerFactory" /><br></list><br></property><br>

Best regards,
Chee Kin

limcheekin

Hi there,

When I boot up my application, I find out that the activiti engine invokes getSessionType() of SpringSecurityUserManagerFactory and SpringSecurityGroupManagerFactory, but not openSession().

Below is the way I implement the UserManager, may I know is there anything wrong?

<br>package org.grails.activiti.springsecurity<br>&hellip;<br><br>class UserManager extends org.activiti.engine.impl.persistence.entity.UserManager {<br>&hellip;<br>}<br>

Please see a complete source code here http://code.google.com/p/grails-activiti-spring-security-plugin/source/browse/src/groovy/org/grails/activiti/springsecurity/UserManager.groovy

I'd love to hear from you about how to troubleshooting this problem.

Best regards,
Chee Kin

limcheekin

Hi ageen and Carlos,

I still have no idea what went wrong.

Would you mind to share the code of UserManagerFactory and UserManager implementation?

Thanks,
Chee Kin

ageen

In this case, I would suggest you to pull out the activiti source code (specifically the engine module and the spring module, or maybe webapp-rest code as well), to debug it and see what's going on. That's what I would do if see something similar.

limcheekin

In this case, I would suggest you to pull out the activiti source code (specifically the engine module and the spring module, or maybe webapp-rest code as well), to debug it and see what's going on. That's what I would do if see something similar.

Sure. Thanks for quick response.

Anything wrong with my implementation of UserManager class?

Best regards,
Chee Kin

auzreal

 <property name="customSessionFactories"> <list> <bean class="org.grails.activiti.springsecurity.SpringSecurityUserManagerFactory"> <property name="usersDao" ref="usersDAO"/> </bean> <bean class="org.grails.activiti.springsecurity.SpringSecurityGroupManagerFactory"> <property name="groupsDao" ref="groupsDAO"/> </bean> </list> </property> and SpringSecurityUserManagerFactory implementation:
 package org.grails.activiti.springsecurity; import org.activiti.engine.impl.interceptor.Session; import org.activiti.engine.impl.interceptor.SessionFactory; class SpringSecurityUserManagerFactory implements SessionFactory { public Class<?> getSessionType() {   return UserManager.class; } public Session openSession() {   return new UserManager(); } } I guess you should return org.activiti.engine.impl.persistence.entity.UserManager instead of the one in package org.grails.activiti.springsecurity. In this way, the custom SessionFactory can override original UserManager settings.

ageen

+1 on Auzreal's point.

auzreal

something like this:

<br>package org.grails.activiti.springsecurity;<br><br>import org.activiti.engine.impl.interceptor.Session;<br>import org.activiti.engine.impl.interceptor.SessionFactory;<br><br>class SpringSecurityUserManagerFactory implements SessionFactory {<br>&nbsp;&nbsp; public Class<?> getSessionType() {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return org.activiti.engine.impl.persistence.entity.UserManager.class;&nbsp; // original UserManager<br>&nbsp;&nbsp; }<br><br>&nbsp;&nbsp; public Session openSession() {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return new UserManager(); // Customized UserManger extended from org.activiti.engine.impl.persistence.entity.UserManager<br>&nbsp;&nbsp; }<br>}<br>

limcheekin

I guess you should return org.activiti.engine.impl.persistence.entity.UserManager instead of the one in package org.grails.activiti.springsecurity. In this way, the custom SessionFactory can override original UserManager settings.

Hi Auzreal,

Great! You spot my mistake and save me many hours of debugging.

Thank you very much!

Warmest regards,
Chee Kin

p4w3l

I was able to replace User / Group Manager with mine own impl. and now I can't login into Explorer nor Rest. You can see the trace below. I know that my LDAP implementation connects to LDAP server and all required findXXX methods are tested. I.e. when I type wrong username I have a message about it. But when I type correct username / password I have error. UserManager doesn't implement checkPassword so, … Question: how login can be delegated to customised managers ?

19:35:28,432&nbsp; ERROR [extensions.webscripts.AbstractRuntime] Exception from execu<br>teScript - redirecting to status template error: 04270000 Username and password<br>does not match.<br>org.springframework.extensions.webscripts.WebScriptException: 04270000 Username<br>and password does not match.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.activiti.rest.api.identity.LoginPost.executeWebScript(LoginPost.j<br>ava:75)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.activiti.rest.util.ActivitiWebScript.executeImpl(ActivitiWebScrip<br>t.java:68)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.DeclarativeWebScript.execut<br>e(DeclarativeWebScript.java:64)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.PresentationContainer.execu<br>teScript(PresentationContainer.java:69)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.AbstractRuntime.executeScri<br>pt(AbstractRuntime.java:333)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.AbstractRuntime.executeScri<br>pt(AbstractRuntime.java:189)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.servlet.WebScriptServlet.se<br>rvice(WebScriptServlet.java:118)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl<br>icationFilterChain.java:290)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF<br>ilterChain.java:206)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV<br>alve.java:233)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardContextValve.invoke(StandardContextV<br>alve.java:191)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j<br>ava:127)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j<br>ava:102)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal<br>ve.java:109)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.jav<br>a:298)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java<br>:859)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce<br>ss(Http11Protocol.java:588)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:48<br>9)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at java.lang.Thread.run(Thread.java:662)<br>2011-05-27 19:35:28 org.springframework.extensions.webscripts.connector.Authenti<br>catingConnector handshake<br>SEVERE: An exception occurred while attempting authentication handshake for endp<br>oint: <a href="http://localhost:8080/activiti-rest/service" rel="nofollow noopener noreferrer">http://localhost:8080/activiti-rest/service</a><br>org.springframework.extensions.surf.exception.AuthenticationException: 04270000<br>Username and password does not match.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.activiti.surf.ActivitiRESTAuthenticator.authenticate(ActivitiREST<br>Authenticator.java:97)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.webscripts.connector.AuthenticatingCon<br>nector.handshake(AuthenticatingConnector.java:403)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.activiti.surf.ActivitiUserFactory.authenticate(ActivitiUserFactor<br>y.java:141)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.surf.mvc.LoginController.handleRequest<br>Internal(LoginController.java:67)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.mvc.AbstractController.handleRequest(<br>AbstractController.java:153)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.ha<br>ndle(SimpleControllerHandlerAdapter.java:48)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.DispatcherServlet.doDispatch(Dispatch<br>erServlet.java:771)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.DispatcherServlet.doService(Dispatche<br>rServlet.java:716)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.FrameworkServlet.processRequest(Frame<br>workServlet.java:647)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServ<br>let.java:563)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl<br>icationFilterChain.java:290)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF<br>ilterChain.java:206)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDisp<br>atcher.java:646)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationDispatcher.processRequest(Applica<br>tionDispatcher.java:436)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationD<br>ispatcher.java:374)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDis<br>patcher.java:302)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.tuckey.web.filters.urlrewrite.NormalRewrittenUrl.doRewrite(Normal<br>RewrittenUrl.java:195)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.tuckey.web.filters.urlrewrite.RuleChain.handleRewrite(RuleChain.j<br>ava:159)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.tuckey.web.filters.urlrewrite.RuleChain.doRules(RuleChain.java:14<br>1)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.tuckey.web.filters.urlrewrite.UrlRewriter.processRequest(UrlRewri<br>ter.java:90)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewrit<br>eFilter.java:417)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl<br>icationFilterChain.java:235)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF<br>ilterChain.java:206)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV<br>alve.java:233)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardContextValve.invoke(StandardContextV<br>alve.java:191)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j<br>ava:127)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j<br>ava:102)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal<br>ve.java:109)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.jav<br>a:298)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java<br>:859)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce<br>ss(Http11Protocol.java:588)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:48<br>9)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at java.lang.Thread.run(Thread.java:662)

limcheekin

something like this:

 package org.grails.activiti.springsecurity; import org.activiti.engine.impl.interceptor.Session; import org.activiti.engine.impl.interceptor.SessionFactory; class SpringSecurityUserManagerFactory implements SessionFactory {    public Class<?> getSessionType() {       return org.activiti.engine.impl.persistence.entity.UserManager.class;  // original UserManager    }    public Session openSession() {       return new UserManager(); // Customized UserManger extended from org.activiti.engine.impl.persistence.entity.UserManager    } }

Is your custom UserManagerFactory return org.activiti.engine.impl.persistence.entity.UserManager.class in getSessionType()? Please see sample code from Auzreal above.

Best regards,
Chee Kin

p4w3l

Yes, I followed this thread and my objects are in place. I.e. when I put wrong username in Explorer then I see exception about that my method findUserById returns null. So my objects are being called. Unfortunately I cannot login into Explorer nor Rest application. Can you with your objects?

limcheekin

Yes, I followed this thread and my objects are in place. I.e. when I put wrong username in Explorer then I see exception about that my method findUserById returns null. So my objects are being called. Unfortunately I cannot login into Explorer nor Rest application. Can you with your objects?

I not sure as I didn't tried it and couldn't find time to try it at the moment. Perhaps other developers here can help you.

Best regards,
Chee Kin

p4w3l

Somebody please tell me what is returned by:

ProcessEngines.getProcessEngine(engineName).getIdentityService()
in relation to customised UserManager and GroupManager ?!

It looks like returned object contains method:

boolean checkPassword(userId, password)
and I don't see coresponding one in customised UserManager and GroupManager. Even if I implemented one in UserManager it is not called :x

p4w3l

Ok, I found it but still need team advice to fully hack it. The problem with my LDAP is that it stores password hash instead of passwords themself. My customised UserManager.findUserById returns then UserEntity object with empty password property so then CheckPassword 'command' verifies user/pass negative.

I need to replace one or even both of below clases in configuration:

org.activiti.engine.impl.cmd.CheckPassword
org.activiti.engine.impl.IdentityServiceImpl

My customised CheckPassword will try to login into LDAP backend to verify given user/pass pair instead of compare them with User object.

Is it possible to configure activiti.cfg.xml or somewhere else to change CheckPassword command or if not then whole IdentityServiceImpl ?

bl4cky

Is anywhere a good explained Tutorial for Ldap integration. I read the whole thread but dont get it.
Can anyone publish his classes? That would be great.

mtr3691

Is anywhere a good explained Tutorial for Ldap integration. I read the whole thread but dont get it.
Can anyone publish his classes? That would be great.

I second this post!…a tutorial would be great…

limcheekin

Hi there,

I did it for spring security and working fine for both 5.5 and 5.6, the source here may be helpful to you guys http://code.google.com/p/grails-activiti-spring-security-plugin/source/browse/.

Please look into src directory.

Best regards,
Chee Kin