This page is designed to show how to integrate Roller 4.0 with LDAP and JA-SIG Central Authentication Service. To begin, you will need to download the following:
- Apache Directory Server 1.5.1
- Apache Directory Studio 1.0.1
- Apache Roller 4.0
- Apache Tomcat 6.0.14
- CAS 3.1
These instructions should work on any application server, providing you're able to install Roller.
Install Roller and Test
The first step is to install Roller and ensure it works on your application server.
- Install Tomcat 6 and install the MySQL JDBC Driver in its "lib" directory. Also install JavaMail's activation.jar and mail.jar.
- Create a CATALINA_HOME environment variable that points to the location where you installed Tomcat.
- Create a roller-custom.properties file and put it in your server's classpath ($CATALINA_HOME/lib for Tomcat 6).
installation.type=auto database.configurationType=jdbc database.jdbc.driverClass=com.mysql.jdbc.Driver database.jdbc.connectionURL=jdbc:mysql://localhost:3306/rollerdb?createDatabaseIfNotExist=true database.jdbc.username=root database.jdbc.password= mail.configurationType=properties mail.hostName=localhost
- Copy apache-roller-4.0/webapps/roller to $CATALINA_HOME/webapps/roller and start Tomcat.
- Go to http://localhost:8080/roller and complete the steps to add a new user and create a blog. When creating a new user, use admin for the username and admin for the password.
- Test that Roller works by creating a blog entry using the web interface, or using a client like MarsEdit (Moveable Type, RPC URL: http://localhost:8080/roller/roller-services/xmlrpc, Blog ID: admin).
Install LDAP and Test
Now that you have Roller installed and working, configure it to authenticate against LDAP instead of the "rollerdb" database.
- Stop Tomcat.
- Install Apache Directory Server and start it as root by running "sudo /usr/local/apacheds" (on OS X).
- Install Apache Directory Studio and launch the application.
- Create a new LDAP Connection with the following settings:
- Connection Name: Local ApacheDS
- Hostname: localhost
- Port: 10389
- Encryption: No Encryption
- (Click Next)
- Bind DN or user: uid=admin,ou=system
- Bind password: secret
- (Click Finish)
- Download roller.ldif to your Desktop. This file contains an admin account as well as Groups and People organizational units.
- In Apache Directory Studio, right click on dc=example,dc=com and select Import > LDIF Import...
- Select roller.ldif for the LDIF file and click Finish. You may get an error during the import, but it should add entries successfully.
- Modify $CATALINA_HOME/lib/roller-custom.properties so it has a single entry:
users.sso.enabled=true
- Open $CATALINA_HOME/webapps/roller/WEB-INF/security.xml in your favorite XML editor. Look for "LDAP/SSO" and uncomment the bean definitions to enable LDAP. In the "authenticationManager" bean, comment out "daoAuthenticationProvider" and enable "ldapAuthProvider". Commenting out "daoAuthenticationProvider" is not necessary, but it allows you to verify you're only authenticating against LDAP. Use the following values for the values in the "initialDirContextFactory" bean.
- LDAP_URL = ldap://localhost:10389/dc=example,dc=com
- LDAP_USERNAME = uid=admin,ou=system
- LDAP_PASSWORD = secret
- While you're editing security.xml, change the "rollerlovesacegi" value to something unique to your server. Any XML-friendly characters will work. The more cryptic the better.
- Start Tomcat and login to your blog with admin/adminldap.
Install CAS and Test
Install Apache Directory Server using the installer for your OS. If you're on OS X, the server will be installed in /usr/local/apacheds by default.