Configuring External Security Authentication with LDAP
Use the following procedure to configure external LDAP server.
Important: Ensure that there is no new entry for an LDAP connection in <Software AG_directory>\profiles\ODE\ configuration\jaas.config.
To configure LDAP security authentication
1. Stop the OneData server.
2. Navigate to the directory <Software AG_directory>\profiles\ODE\configuration\com.softwareag.platform.config.propsloader.
3. For each OneData repository in your environment, create a properties file with the name com.softwareag.jaas.realm.pid-<Repository_ID>JaasConfig.properties.
For example, if you have two repositories, Repo1 and Repo2 in your environment , then you must create the following two properties files for them:
com.softwareag.jaas.realm.pid-onedataRepo1JaasConfig.propertiescom.softwareag.jaas.realm.pid-onedataRepo2JaasConfig.properties 4. Add the following content to the to all the com.softwareag.jaas.realm.pid-<Repository_ID>JaasConfig.properties properties files:
realm=onedata.<Repository_ID>
0.option.java.naming.referral=follow
0.option.java.naming.provider.url="ldap://<LDAP_Server>:<LDAP_Port>/"
0.flag=required
@secure.0.option.bindCredential=<Password_in_Clear_Text>
0.option.bindDN="uid=<LDAP_User_Name>,ou=<Organizational_Unit>,dc=<Domain_Component_1>,
dc=<Domain_Component_2>"
0.module=com.datafoundations.onedata.security.auth.module.LdapLoginModule
0.option.baseFilter=(sAMAccountName={0})
0.option.baseCtxDN="ou=<Organizational_Unit>,dc=<Domain_Component_1>,dc=<Domain_Component_2>"
0.option.debug=false
Important: Do not change the values of the following properties:
0.option.java.naming.referral=follow
0.flag=required
0.module=com.datafoundations.onedata.security.auth.module.LdapLoginModule
0.option.debug=false
5. Save and close the files.
6. Restart OneData.
OneData now authenticates the users against the configured external LDAP server.