The key is the name of the realm. You can define any name. The name is taken as a reference to set the properties of the realm.
The value is the name of the class that implements the realm. The implementation from SOS extends
Please note that you can have more than one LDAP realm configuration but each realm requires a unique name.
The host and the port of your LDAP server. You can check whether the server is reachable with
Make sure that the firewall is open for the given port.
To enable Starttls set the value to
Please note that the server must be prepared to serve with Starttls. To check this, you can use an LDAP browser such as the "Softerra LDAP Browser". Configure your LDAP Server there and click the "Enable Starttls Button"
On client side you will need the certificate and you have to add the certificate to your truststore. The path to your truststore is defined in the
we habe had difficulties when using Starttls with the JRE 1.8.0_151 and have overcome these by installing the corresponding JDK.
|Enables the host name verification of the certificate. The default value is |
|The implementation of the permission resolver. The SOS implementation uses the |
|Sets the role permission resolver for the LDAP realm.|
$ldapRealm [, $ldapRealm [, $iniRealm]]
Sets the list of realms that should be used for authentication. This is a comma separated list of items.
Authentication can be configured for a multi-realm environment made up of one or more LDAP realms, with or without an ini realm. The A simple multi-realm configuration is shown in the mixed LDAP and Shiro Authentication example lmixed LDAP and Shiro Authentication example below shows a simple multi-realm configuration.