Example: One Authentication is Sufficient

In this example, a user is authenticated against multiple LDAP branches. If authentication fails in the first branch, the second is tried. Only one module instance needs to succeed for the user to be authenticated.

This behavior is controlled by the sufficient Flag.

EMSUserAuthentication {
    com.tibco.tibems.tibemsd.security.jaas.LDAPSimpleAuthentication sufficient
    tibems.ldap.user_pattern="uid=%u,ou=People,dc=Local"
    tibems.ldap.url="ldap://localhost:389" ;
    com.tibco.tibems.tibemsd.security.jaas.LDAPSimpleAuthentication sufficient
    tibems.ldap.user_pattern="uid=%u,ou=People,dc=Remote"
    tibems.ldap.url="ldap://localhost:389" ;
};