Configuring LDAP Repository Security

By default, Dynamo uses a SQL repository to authenticate users and groups and authorize access. You can configure the security mechanism to use the LDAP repository of a Sun ONE Directory Server (formerly iPlanet Directory Server) or Microsoft Active Directory Server instead. An LDAP repository can be used to authenticate users and to authorize access by retrieving users’ privileges from the LDAP directory. For more information about LDAP repositories, see the ATG Repository Guide.

This section describes how to configure Dynamo to use an LDAP repository to authenticate users and roles. The configuration process consists of the following steps:

  1. Configure users and groups on an LDAP server.

  2. Configure base common names. (Microsoft Active Directory only)

  3. Configure a password hasher. (Sun ONE Directory Server 5.0 only)

  4. Configure the InitialContextEnvironment component.

  5. Create an XML definition file.

  6. Test the connection to the LDAP server.

  7. Configure the DYNAMO_MODULES variable.

  8. Enable caching of security information.

These steps are described in detail in the following sections.

 
loading table of contents...