NIH | National Cancer Institute | NCI Wiki  

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

When I installed OpenLDAP on Ubuntu (Desktop version). All LDAP function works by default. There is no any issues. I can use any LDAP client tool to access the remote LDAP server, which is on Ubuntu Desktop.

NBIA LDAP

...

Settings

In nbia.properties (Tomcat7.0/lib/nbia.properties)

Code Block
authentication.type=ldap-auth

...



ldap.url=ldap://192.168.56.101:389

...


ldap.basedn=dc=smab,dc=org

...


ldap.user=CN=admin,dc=smab,dc=org

...


ldap.pass=smab123456

...



ldap.memberOf.attribute.name=isMemberOf

...


ldap.mail.attribute.name=mail

...


ldap.group.ignore.list=PwmAdmins,devTeam,nlst,testGroup

...


public.collection.access.group.name=General User

...


product.variation=NBIA

...


ldap.user and ldap.pass must be the administrator information of LDAP server.

...


3. In jaas.conf (Tomcat7.0/conf/jaas.conf)

...


NCIA

...


{

...


gov.nih.nci.security.authentication.loginmodules.LDAPLoginModule Required

...


ldapHost="ldap://192.168.56.101:389"

...


ldapSearchableBase="dc=smab,dc=org"

...


ldapUserIdLabel="cn"

...


ldapAdminUserName="CN=admin,dc=smab,dc=org"

...


ldapAdminPassword="smab123456";

...


};

...

Note

The jaas.conf is generated during the NBIA installation. The default ldapUserIdLabel is ‘cn’, which means the LDAP server will search ‘cn’ value, then compare to the login username. If the user name is exist in LDAP server, the LDAP server will do the authentication for this user.


Some LDAP server may use other field to store the login username like ‘uid’. So we have to change this value to ‘uid’ if the LDAP server use this field to store username.
ldapUserIdLabel="cn"

After changing that, we have to restart the Tomcat to take effect.