Release Automation

 View Only

Easy way to configure LDAP (AD) integration

  • 1.  Easy way to configure LDAP (AD) integration

    Posted Feb 24, 2016 08:03 AM

    During the last implementations that i worked, the LDAP integration always have some issues.

    So, this is the steps that I follow to ensure the configuration is working fine:

     

    1) Verify the customer information testing in Import from LDAP users

    When you click at load, must return the users in LDAP Users box.

    If some information are wrong, it will not work.

     

    2) Edit distributed.properties

    Open the file <install_dir>/webapps/datamanagement/WEB-INF/distributed.properties at Management server.

    Uncomment the lines and fill the values like the example bellow:

     

    use.active.directory.authentication=true

    use.active.directory.domain=here.intranet

    use.active.directory.url=ldap://server01.here.intranet

    use.active.directory.user.username=user@here.intranet

    use.active.directory.user.password=3B1D7416664B6E3D4DD9CC8869524E6D

     

    It´s possible to use encrypted password.

    To encrypt:

    at <install_dir> run the command:

    scripts/encrypt_password.sh <password>

     

    Restart the service:

    ./nolio_server.sh restart

     

    3) Connect using a LDAP user

    Open ROC and try to authenticate with a valid LDAP user.

    If the connection doesn´t work, it´s possible to increase the logs level:

     

    Edit the file:

    <install_dir>/webapps/datamagement/WEB-INF/log4j.properties

     

    FROM:

    log4j.logger.com.nolio.platform.server.dataservices.services.auth.providers.NolioActiveDirectoryAuthenticationProvider=WARN

    #log4j.logger.org.springframework.security=DEBUG, Spring

     

    TO:

    log4j.logger.com.nolio.platform.server.dataservices.services.auth.providers.NolioActiveDirectoryAuthenticationProvider=ALL

    log4j.logger.org.springframework.security=ALL

     

    Restart the service:

    ./nolio_server.sh restart

     

    Open ROC and try to authenticate with a valid LDAP user again.

    Verify the logs at:

    <install_dir>/logs/nolio_dm_all