Sun Java System Web Server 7.0 Update 3 Administrator's Guide

ProcedureTo Configure LDAP Authentication

  1. Login to Administration Console.

  2. Click Nodes tab to view a list of nodes configured in the server.

  3. Click on the Administration Node from the list.

  4. Select Authentication from Administration Server - General Settings page.

  5. Select Use LDAP Authentication button.


    Note –

    The Use LDAP Authentication is enabled only for Administration Server.


  6. Enter LDAP authentication information.

    By entering the user groups in the Allowed Groups text field, the administrator enables or disables LDAP authentication to the group.

  7. Click the Save button.


    Note –

    Using CLI

    • For enabling Administration Server to authenticate against LDAP server, execute the following command.


      wadm enable-admin-ldap-auth --user=admin --host=serverhost 
      --password-file=../admin.passwd --port=8989 --ssl=true --no-prompt rcfile=null 
      --ldap-url=ldap://serverhost.com:3950/dc=xyz,dc=xyz,dc=xyz 
      --bind-dn=cn="Directory Manager"
      

      wadm enable-admin-ldap-auth --user=admin --host=serverhost 
      --password-file=../admin.passwd --port=8989 --ssl=true 
      --ldap-url=ldap://serverhost:port/dc=acme,dc=com 
      --allow-group="group1,group2,group3"
      

      See CLI Reference, enable-admin-ldap-auth(1)

    • For disabling Administration authentication to LDAP server execute the following command.


      wadm disable-admin-ldap-auth --user=admin --host=serverhost 
      --password-file=../admin.passwd --port=8989 --ssl=true --no-prompt --rcfile=null
      

      See CLI Reference, disable-admin-ldap-auth(1)

    • For displaying Administration LDAP authentication properties execute the following command.


      wadm get-admin-ldap-auth-prop --user=admin --host=serverhost 
      --password-file=../admin.passwd --port=8989 --ssl=true --no-prompt rcfile=null
      

      wadm get-admin-ldap-auth-prop --user=admin 
      --host=serverhost --password-file=../admin.passwd --port=8989 --ssl=true 
      --no-prompt rcfile=null allow-group
      

      See CLI Reference, get-admin-ldap-auth-prop(1)