Enportal/old/ldap configuration - Revision history

imported>Jason.nicholls: moved EnPortal LDAP Configuration to enportal/old/ldap configuration

2014-07-17T17:52:49Z

moved EnPortal LDAP Configuration to enportal/old/ldap configuration

← Older revision	Revision as of 17:52, 17 July 2014
(No difference)

imported>Jason.nicholls at 17:52, 17 July 2014

2014-07-17T17:52:34Z

← Older revision		Revision as of 17:52, 17 July 2014
Line 1:		Line 1:
	{{DISPLAYTITLE:enPortal LDAP Configuration}}		{{DISPLAYTITLE:enPortal LDAP Configuration}}
			[[Category:enPortal old]]
	enPortal provides [[enportal/old/provisioning\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.		enPortal provides [[enportal/old/provisioning\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.

imported>Jason.nicholls at 06:55, 17 July 2014

2014-07-17T06:55:07Z

← Older revision		Revision as of 06:55, 17 July 2014
Line 1:		Line 1:
	{{DISPLAYTITLE:enPortal LDAP Configuration}}		{{DISPLAYTITLE:enPortal LDAP Configuration}}
	enPortal provides [[~~EnPortal_Provisioning~~\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.		enPortal provides [[enportal/old/provisioning\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.

imported>Jonathan.Ho: /* Configuring LDAP Managed Domains */

2013-12-06T16:44:09Z

Configuring LDAP Managed Domains

← Older revision		Revision as of 16:44, 6 December 2013
Line 78:		Line 78:
	#** <b>Session Lease</b> - The time in seconds until the current session will expire from lack of use. This is in the context of enPortal sessions for users in this Domain.		#** <b>Session Lease</b> - The time in seconds until the current session will expire from lack of use. This is in the context of enPortal sessions for users in this Domain.
	#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.		#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.
	#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:		#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered with following authenticators:
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP.		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.

imported>Jonathan.Ho: /* LDAP With SSL */

2013-12-06T16:41:20Z

LDAP With SSL

← Older revision		Revision as of 16:41, 6 December 2013
Line 158:		Line 158:


	# Specify ldaps:// in the connection details defined in the LDAPRepository that is registered.		# Specify ldaps:// and secured port in the connection details defined in the LDAPRepository that is registered.
	# Add the cert to the cacerts file in JAVA_HOME/lib/security (where JAVA_HOME is the Java runtime that enPortal is configured to run with). Some details on how to do this can be found at http://docs.oracle.com/javaee/1.4/tutorial/doc/Security6.html.		# Add the cert to the cacerts file in JAVA_HOME/lib/security (where JAVA_HOME is the Java runtime that enPortal is configured to run with). Some details on how to do this can be found at http://docs.oracle.com/javaee/1.4/tutorial/doc/Security6.html.


	== LDAP Configuration Case Study Example ==		== LDAP Configuration Case Study Example ==

imported>Jonathan.Ho: /* Configuring LDAP Managed Domains */

2013-12-06T16:38:39Z

Configuring LDAP Managed Domains

← Older revision		Revision as of 16:38, 6 December 2013
Line 79:		Line 79:
	#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.		#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.
	#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:		#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:
	~~#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticator</tt> - use this class when accessing non-Microsoft LDAP.~~
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtended</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP.		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.
	~~#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticator</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with this authenticator.~~
	#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticatorWithLazyLoad</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with this authenticator.		#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticatorWithLazyLoad</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with this authenticator.
	#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"		#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"

imported>Jonathan.Ho: /* Configuring LDAP Managed Domains */

2013-12-06T16:22:45Z

Configuring LDAP Managed Domains

← Older revision		Revision as of 16:22, 6 December 2013
Line 79:		Line 79:
	#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.		#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.
	#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:		#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticator</tt>		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticator</tt> - use this class when accessing non-Microsoft LDAP.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtended</tt>		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtended</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt>		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP.
	#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt>		#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt> - use this class when accessing non-Microsoft LDAP. Password change is possible with this authenticator if the LDAP is OpenDS based.
	#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticator</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with authenticator.		#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticator</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with this authenticator.
	#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticatorWithLazyLoad</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with authenticator ~~and is synced~~		#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticatorWithLazyLoad</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with this authenticator.
	#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"		#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"
	#* <b>Search</b> tab		#* <b>Search</b> tab

imported>Jonathan.Ho: /* Configuring LDAP Managed Domains */

2013-12-06T16:08:06Z

Configuring LDAP Managed Domains

← Older revision		Revision as of 16:08, 6 December 2013
Line 78:		Line 78:
	#** <b>Session Lease</b> - The time in seconds until the current session will expire from lack of use. This is in the context of enPortal sessions for users in this Domain.		#** <b>Session Lease</b> - The time in seconds until the current session will expire from lack of use. This is in the context of enPortal sessions for users in this Domain.
	#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.		#** <b>Session Extension</b> - The number of seconds relative to the current time for which to extend the enPortal session for users in this Domain as they use the enPortal system.
	#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. ~~Example~~: "com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad"		#** <b>Pluggable Authenticator</b> - The pluggable authentication that will be used by enPortal to authenticate any user within this domain. Note: This is the fully qualified Java class that must implement the com.edgetech.eportal.session.SessionAuthenticator interface. Portal is delivered following authenticators:
			#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticator</tt>
			#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtended</tt>
			#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorWithLazyLoad</tt>
			#*** <tt>com.edgetech.eportal.session.impl.LDAPSessionAuthenticatorExtendedWithLazyLoad</tt>
			#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticator</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with authenticator.
			#*** <tt>com.edgetech.eportal.session.impl.ActiveDirectoryAuthenticatorWithLazyLoad</tt> - use this class when accessing Microsoft Active Directory. Password change is possible with authenticator and is synced
	#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"		#** <b>Authentication Type</b> - Type of authentication that is used by the LDAP Server. Example: "simple"
	#* <b>Search</b> tab		#* <b>Search</b> tab

imported>Jonathan.Ho: /* Configuring LDAP Repositories */

2013-12-06T15:47:38Z

Configuring LDAP Repositories

← Older revision		Revision as of 15:47, 6 December 2013
Line 34:		Line 34:
	# In the panel on the right, fill in the following values under the <b>General</b> tab:		# In the panel on the right, fill in the following values under the <b>General</b> tab:
	#* <b>Repository Name</b> - Enter the Repository Name. It is a unique name used to identify an LDAP Server that will be mapped into enPortal.		#* <b>Repository Name</b> - Enter the Repository Name. It is a unique name used to identify an LDAP Server that will be mapped into enPortal.
	#* <b>Repository URL</b> - The URL where the LADP Repository can be accessed by enPortal. This URL will typically begin with "ldap://". Example: "ldap://192.168.155.165:389"		#* <b>Repository URL</b> - The URL where the LADP Repository can be accessed by enPortal. This URL will typically begin with "ldap://". Example: "ldap://192.168.155.165:389" or "ldaps://192.168.155.165:636" for ssl access
	#** Note: Failover of repositories is also supported. Instead of entering one URL, you can enter multiple URLs separated by a space.		#** Note: Failover of repositories is also supported. Instead of entering one URL, you can enter multiple URLs separated by a space.
	#*** Example: ldap://192.168.155.165:389 ldap://192.168.155.276:389 ldap://192.168.155.387:389		#*** Example: ldap://192.168.155.165:389 ldap://192.168.155.276:389 ldap://192.168.155.387:389

imported>Jason.nicholls at 17:55, 16 October 2013

2013-10-16T17:55:05Z

← Older revision		Revision as of 17:55, 16 October 2013
Line 1:		Line 1:
			{{DISPLAYTITLE:enPortal LDAP Configuration}}
	enPortal provides [[EnPortal_Provisioning\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.		enPortal provides [[EnPortal_Provisioning\|provisioning]] tools for managing Domains, Users, and Roles inside of enPortal. However, some organizations already have an LDAP server in place to manage Users and Roles. In this case, enPortal can map to the existing LDAP configuration and rely on LDAP for externally managing this information. This page provides instructions on configuring LDAP with enPortal.