Restricting login to a specific group in Active Directory

Issue Description:

I want only a certain group within my Active Directory to be able to login to JasperReportsServer. How do I achieve that?

Resolution:

What you can do is make sure users get no roles by default when trying to login, and map your LDAP group you want to allow logging in to an internal JasperReportsServer role that allows for login. This is all done within the applicationContext-externalAuth-LDAP-mt.xml file. So for instance you might have something like

<bean>

<property name="defaultInternalRoles">
    <list>

   </list>
</property>
<property name="organizationRoleMap">

   <-->
    <!--Example of mapping customer roles to JRS roles

   <entry>

      <key>

         <value>Admin LDAP!</value>

      </key>
    <!-- JRS role that the <key> external role is mapped to

<value>ROLE_ADMINISTRATOR</value>

</entry>

</map>

</property>

</bean>