Apache directory studio active directory authentication

#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION HOW TO#
#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION INSTALL#
#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION WINDOWS#

This OpenNTF Active directory name picker project and search by Rishi Sahi looks really interesting. In our case the group name is CN=testgroup4/CN=Users/DC=ad/DC=focul/DC=net Groups also work but note that if you put a group into the AD as a peer of вЂњUsersвЂќ the group name construct includes вЂњBuiltinвЂќ as in CN=testgroup/CN=Builtin/DC=ad/DC=focul/DC=net so it is better to put the groups within the users branch. The AD name CN=joe bloggs,CN=Users,DC=ad,DC=focul,DC=net gets mapped to CN=joe bloggs/CN=Users/DC=ad/DC=focul/DC=net for use in the ACL You can see the shape of the name from the console output You can now test it with a specific name. In the console you will see something similar to this : Open the URL and attempt to login вЂ“ in my case as Joe Bloggs. With a test database set anaonymous access to No Access and Default Access to reader or higher. Start with the most basic example you can. Note that the suggest and verify buttons are very useful, particularly for the Base DN for search

#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION HOW TO#

Note that Gabriella Davis and Marie Scott on page 20 of their very useful presentation One DirectoryTo Rule Them All, Yes suggests encrypting the LDAP configuration document вЂ“ not sure how to do that just yet. In the Directory Assistance Database create a record as follows.

The server document entry looks like this The directory assistance template is an advanced template called called Directory Assistance ( da.ntf ) You need to create a Directory Assistance Database and then list this in the server record The equivalent вЂњNotes nameвЂќ as used in an ACL would beД¬N=joe bloggs/CN=Users/DC=ad/DC=focul/DC=netД¬onfiguring Domino to use the Active Directory LDAP

Next you can browse the LDAP tree and see information on the users and groups Press the check Authentication button and all should be well Use File New and then choose LDAP Connection I then created a new user ( joe bloggs ) and used that account to authenticate the LDAP feed.Д®xploring the LDAP Feed with Apache Directory Studio

#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION INSTALL#

I installed a 2008 R2 server as a VM and used the Server Roles Manager wizard to install Active Directory accepting the defaults and dependencies. LDAPDEBUG=1 Setting up an AD test environment I found the following two parameters very useful because you can see the structures of the names and groups in AD as they are queried by Domino вЂ“ these settings are for temporary use only as they create overhead and also show users passwords on the console in plain text ( somewhat disconcerting ) This allows you to explore the Active Directory LDAP feed and get a feel for its structure. I found that the Apache Directory Studio was really useful. The scheme is simple enough but I struggled to piece the bits together so I thought a write up would be useful.

#APACHE DIRECTORY STUDIO ACTIVE DIRECTORY AUTHENTICATION WINDOWS#

The example uses a Windows Server 2008 R2 for AD and Domino 8.5.2 running on Linux. This is particularly useful in our case where we have an XPages based application running in on a black boxed appliance in a MS shop. This article describes how you can use Active Directory via LDAP and Directory Assistance to authenticate your web users.

Apache directory studio active directory authentication